The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation and example scripts suggest the use of npx hookdeck-cli for local testing. This is a legitimate utility provided by the skill's author (hookdeck) for webhook tunneling and does not represent a security risk.
[SAFE]: The skill correctly implements HMAC-SHA256 signature verification and endpoint challenge validation according to LinkedIn's specific security requirements, utilizing constant-time comparison methods (timingSafeEqual and compare_digest) to prevent timing attacks.
[SAFE]: Secret management practices in the provided code follow security standards, utilizing environment variables and excluding secrets from version control via .env.example files.

linkedin-webhooks