The Agent Skills Directory

[SAFE]: The skill implements secure webhook verification by using official Cloudinary SDKs (cloudinary for Node.js and Python) to validate the x-cld-signature and x-cld-timestamp headers against the raw request body.
[SAFE]: The provided code correctly emphasizes the security requirement of using the raw request body byte-for-byte to prevent signature mismatches caused by JSON re-serialization.
[SAFE]: Secret management follows best practices by using environment variables (CLOUDINARY_API_SECRET) with clear instructions and .env.example files rather than hardcoding sensitive credentials.
[SAFE]: The skill uses standard, well-maintained libraries for its examples, including FastAPI, Express, and Next.js, along with standard testing frameworks like Jest, Vitest, and Pytest.
[SAFE]: References to external tools, such as the hookdeck-cli, are consistent with the skill's authorship and serve a legitimate purpose for local development and debugging of webhook integrations.

cloudinary-webhooks