Linear Webhooks (Verify, Replay, DLQ)
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for developers to implement Linear webhooks securely. It includes specific, well-implemented code snippets for signature verification using the standard library's
timingSafeEqualto prevent timing attacks. - [SAFE]: The documentation emphasizes re-fetching authoritative state from the Linear GraphQL API instead of trusting the webhook payload directly, which is a recommended practice to mitigate data manipulation risks and out-of-order event delivery.
- [SAFE]: No suspicious patterns, hardcoded credentials, obfuscation, or unauthorized remote code execution were identified. The use of standard development tools like
ngrokfor local testing is appropriate for the stated purpose.
Audit Metadata