The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill implements endpoints for processing external webhook data from Cursor Cloud Agents. Ingestion points: POST request handlers in examples/express/src/index.js, examples/fastapi/main.py, and examples/nextjs/app/webhooks/cursor/route.ts. Boundary markers: The skill provides implementation for HMAC-SHA256 signature verification using the X-Webhook-Signature header to validate the sender. Capability inventory: The code examples demonstrate logging and internal state updates, but do not include dangerous operations like arbitrary command execution. Sanitization: Webhook payloads are parsed as JSON only after successful signature verification, ensuring data authenticity.
[EXTERNAL_DOWNLOADS]: The documentation references npx hookdeck-cli for local development. This is a legitimate utility from the author used to tunnel webhooks to a local server for testing and debugging.

cursor-webhooks