The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill guides the user to install standard libraries for authentication and web server management, including jose, express, fastapi, and PyJWT using npm and pip.
[COMMAND_EXECUTION]: The documentation includes instructions to use npx hookdeck-cli to create a tunnel for local webhook testing. This is a legitimate utility provided by the skill's author (Hookdeck).
[INDIRECT_PROMPT_INJECTION]: The skill implements a webhook receiver that ingests data from external FusionAuth events. While the examples only log properties like user.id or event.type to the console, this represents a data ingestion surface that should be treated with care if the output is processed by downstream systems.
Ingestion points: /webhooks/fusionauth POST endpoint defined in Express, Next.js, and FastAPI examples.
Boundary markers: The skill correctly uses JSON.parse or json.loads after signature verification.
Capability inventory: The code snippets are limited to logging to the console and do not perform file writes, network requests, or dynamic code execution based on the event data.
Sanitization: The examples log data directly; users should implement appropriate sanitization if this data is used in prompts or stored in databases.

fusionauth-webhooks