skills/jeremylongshore/claude-code-plugins-plus-skills/fireflies-webhooks-events/Gen Agent Trust Hub
fireflies-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides code templates for standard cryptographic signature verification using HMAC-SHA256 and timing-safe comparisons, which are essential for preventing forgery and timing attacks.
- [SAFE]: Replay attack protection is correctly implemented by verifying incoming request timestamps against the server's time with a 5-minute validity window.
- [SAFE]: The skill demonstrates secure credential management by using environment variables for sensitive data like webhook secrets and database URLs.
- [SAFE]: External tool references for local testing, such as ngrok and webhook.site, are standard industry tools for webhook development and are mentioned neutrally for testing purposes.
Audit Metadata