The Agent Skills Directory

[SAFE]: The skill follows industry best practices for webhook security by implementing HMAC-SHA256 signature verification using the raw request body to ensure payload integrity.
[SAFE]: Implementation examples across Node.js and Python use timing-safe comparison functions (crypto.timingSafeEqual and hmac.compare_digest) to mitigate potential timing attacks.
[SAFE]: The skill handles incoming webhooks securely by requiring signature validation before parsing the JSON payload, preventing common vulnerabilities associated with pre-parsing middleware.
[SAFE]: All credentials used in documentation, environment variable examples, and test suites are clearly marked placeholders (e.g., abcdef12...) and do not expose real secrets.
[SAFE]: Dependencies listed in package files are standard, well-known libraries for their respective ecosystems (e.g., Express, FastAPI, Next.js). Note: Version numbers in example manifests appear to be placeholders and may require adjustment for current environments.

aiprise-webhooks