webhook-setup
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely informational and does not contain any executable commands or scripts that run automatically.
- [SAFE]: The code examples provided for signature verification correctly implement security best practices, such as using HMAC-SHA256 for integrity, implementing replay attack protection via timestamps, and using timing-safe comparison functions to prevent side-channel attacks.
- [SAFE]: The documentation correctly identifies that webhook secrets should be stored securely and managed via environment variables rather than being hardcoded in application logic.
Audit Metadata