The Agent Skills Directory

[SAFE]: The skill implements industry-standard security practices for webhook handling, specifically for the Adyen payments platform.
HMAC Signature Verification: All provided examples (Next.js, FastAPI, Express) implement mandatory HMAC signature verification. The Python implementation correctly uses hmac.compare_digest for timing-safe comparison, mitigating timing attacks.
Basic Authentication: The examples include optional support for Basic Auth, providing an additional layer of access control as recommended by Adyen.
Dependency Management: Dependencies are standard, well-known libraries (e.g., @adyen/api-library, fastapi, express).
No Malicious Patterns: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found in the instructions or scripts.
Vendor Resources: References to Hookdeck's own tools (e.g., hookdeck-cli) are appropriate for the author and provide legitimate utility for local development and testing.

adyen-webhooks