The Agent Skills Directory

[SAFE]: The skill is primarily instructional and promotes security best practices by teaching the 'fetch-to-confirm' pattern for unsigned webhooks.
[REMOTE_CODE_EXECUTION]: The README files suggest using npx hookdeck-cli for local development. This involves downloading and executing the vendor's own CLI tool from the npm registry, which is standard practice for this service.
[DATA_EXPOSURE]: The skill uses placeholders like test_xxxxx for API keys in .env.example files and correctly instructs users to manage secrets via environment variables.
[INDIRECT_PROMPT_INJECTION]: While the skill processes external webhook data (payment IDs), it explicitly implements and documents a verification pattern that prevents trusting the input data by fetching authoritative state directly from the provider's API.

mollie-webhooks