The Agent Skills Directory

[SAFE]: The skill implements secure webhook verification using HMAC-SHA256 signatures, ensuring the authenticity of incoming data.
[SAFE]: Code examples correctly emphasize verifying signatures against the raw request body before JSON parsing to prevent payload tampering and re-serialization errors.
[SAFE]: Implementation patterns utilize timing-safe comparison functions (e.g., crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to mitigate timing side-channel attacks.
[EXTERNAL_DOWNLOADS]: Recommends the use of hookdeck-cli via npx for local testing. This is a development tool provided by the vendor, Hookdeck.

flexport-webhooks