The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill's examples include configuration for standard package managers (npm and pip) to install common libraries such as Express, FastAPI, and Cryptography. These are sourced from official public registries.
[EXTERNAL_DOWNLOADS]: The documentation suggests using the hookdeck-cli via npx for local development and testing. This is a legitimate utility provided by the skill's author (hookdeck) for webhook tunneling and debugging.
[EXTERNAL_DOWNLOADS]: The Express example references the event-notification-nodejs-sdk, which is the official eBay library for handling these notifications.
[SAFE]: The skill correctly handles eBay's custom security protocols. It implements the mandatory SHA-256 concatenation order for the endpoint challenge and provides a robust ECDSA verification process that uses the raw request body to prevent serialization-related signature failures.
[SAFE]: No evidence of prompt injection, data exfiltration, or obfuscated malicious code was found in the provided files.

ebay-webhooks