outgoing-webhooks
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and code templates for implementing secure outgoing webhooks in Ruby on Rails.
- [SAFE]: Documentation includes robust SSRF protection strategies, specifically advocating for resolving hostnames to IP addresses and using IP pinning (via Net::HTTP#ipaddr) to mitigate DNS rebinding attacks.
- [SAFE]: The skill provides implementation examples for signing webhook payloads with HMAC-SHA256 to ensure data integrity and describes secure credential management practices, such as rotating secrets and filtering sensitive data from logs.
- [SAFE]: Guidance covers secure job processing, atomic claiming of delivery tasks to prevent race conditions, and automatic disabling of failing endpoints to prevent resource exhaustion.
Audit Metadata