The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references hookdeck-cli via npx for local development. This is a tool provided by the vendor (Hookdeck) for webhook tunneling and is appropriate for the skill's stated purpose.
[COMMAND_EXECUTION]: The documentation provides standard development commands for installing dependencies, running local servers (Express, FastAPI, Next.js), and starting the Hookdeck CLI tunnel.
[DATA_EXPOSURE]: The skill uses environment variables (MONDAY_SIGNING_SECRET) for secret management, which is a standard security best practice. No hardcoded credentials or sensitive system file access patterns were detected.
[REMOTE_CODE_EXECUTION]: All dependencies listed in package.json and requirements.txt (such as jose, PyJWT, express, and fastapi) are well-known, industry-standard libraries. No untrusted remote script execution patterns (like curl | bash) were found.

monday-webhooks