The Agent Skills Directory

[SAFE]: The skill provides clear instructions on using environment variables (COMMET_WEBHOOK_SECRET, COMMET_API_KEY) to manage sensitive credentials, which is a security best practice for preventing accidental exposure.
[SAFE]: Every code example for implementing webhook handlers includes mandatory signature verification using the X-Commet-Signature header, ensuring that the application only processes authentic payloads from the vendor.
[SAFE]: The skill explicitly advises users not to use webhook data as the sole source of truth for access control, recommending direct SDK queries instead to prevent security issues arising from delayed or out-of-order events.
[SAFE]: All external dependencies listed (@commet/next, @commet/node, @commet/better-auth) are official libraries belonging to the vendor (commet-labs).

commet-webhooks