The Agent Skills Directory

[SAFE]: The skill provides educational templates and documentation for implementing the Asana webhook protocol, including the X-Hook-Secret handshake and event delivery verification.
[SAFE]: Code examples correctly use timing-safe comparison methods (e.g., crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent side-channel timing attacks during signature verification.
[SAFE]: The skill uses placeholders for sensitive information like API tokens and webhook secrets in .env.example files, correctly instructing users on how to manage credentials securely.
[SAFE]: External dependencies are standard, well-known libraries (e.g., asana, express, fastapi). Tools mentioned, such as hookdeck-cli, are recognized vendor-owned utilities consistent with the skill's author.

asana-webhooks