The Agent Skills Directory

[SAFE]: The skill implements industry-standard HMAC-SHA1 signature verification for Enode webhooks across multiple frameworks including Next.js, FastAPI, and Express.
[SAFE]: Verified the implementation of timing-safe comparison functions (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent potential timing attacks during signature validation.
[SAFE]: Dependencies listed in the example project files are well-known and reputable. Although some version numbers in package.json and requirements.txt (e.g., TypeScript v7, Jest v30, FastAPI 0.139) appear to be non-existent or generated in error, they do not pose a security threat as they target protected package namespaces.
[SAFE]: The skill demonstrates safe credential management practices by using .env.example templates with placeholders instead of hardcoding sensitive secrets.
[SAFE]: Tooling references such as hookdeck-cli are legitimate resources provided by the skill's author and are used for their intended purpose of local development and testing.

enode-webhooks