The Agent Skills Directory

[SAFE]: The skill demonstrates secure webhook verification by using standard cryptographic libraries (crypto in Node.js, hmac in Python) and performing timing-safe comparisons to prevent side-channel attacks.
[SAFE]: The implementation examples correctly use raw request bodies for signature verification, which is critical for Jira webhooks to avoid inconsistencies caused by JSON re-serialization.
[EXTERNAL_DOWNLOADS]: The documentation suggests using hookdeck-cli (the author's own developer tool) via npx for local testing and tunnel management.
[CREDENTIALS_UNSAFE]: The skill uses environment variables (JIRA_WEBHOOK_SECRET) for secret management and provides .env.example files. This is a secure and standard practice for managing sensitive configuration.

jira-webhooks