The Agent Skills Directory

[SAFE]: Provides implementation guidance for Ascend webhook signature verification. Includes code for Express (Node.js), Next.js, and FastAPI (Python). Correctly uses HMAC-SHA256 with a colon separator and raw request body. Implements constant-time comparison to prevent timing attacks.
[EXTERNAL_DOWNLOADS]: Suggests using npx hookdeck-cli for local testing. The tool is provided by the vendor (Hookdeck) to facilitate webhook development. Instructions include tunneling to local ports (e.g., 3000, 8000).
[SAFE]: Encourages secure credential handling. Uses .env files for storing the ASCEND_WEBHOOK_SECRET. Provides .env.example templates with placeholders rather than hardcoded secrets.

ascend-webhooks