The Agent Skills Directory

[SAFE]: The skill implements robust security practices for webhook handling, specifically using Ed25519 (EdDSA) asymmetric signature verification as a detached JWS. It correctly instructs developers to verify the signature against the raw request body and public keys from the project's official JWKS endpoint.
[SAFE]: Replay protection is implemented by enforcing a 5-minute timestamp tolerance check against the X-Neon-Timestamp header.
[EXTERNAL_DOWNLOADS]: The example projects utilize standard package managers (npm and pip) to install well-known and versioned dependencies such as Express, FastAPI, and the Cryptography library from official registries.
[COMMAND_EXECUTION]: The documentation includes standard commands for starting local development servers (e.g., npm run dev, uvicorn main:app) and running unit tests to validate the signature verification logic.
[EXTERNAL_DOWNLOADS]: The skill suggests using the hookdeck-cli via npx for local development tunneling. This tool is provided by the skill's author to facilitate webhook testing and does not involve suspicious execution patterns.

neon-webhooks