The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill examples utilize standard packages from npm and PyPI registries for the Express, Next.js, and FastAPI frameworks. It also references hookdeck-cli for local webhook testing, which is a resource provided by the skill author.
[INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting external PagerDuty webhook data but mitigates risk through strict verification. 1. Ingestion points: Webhook receiver routes in Express, Next.js, and FastAPI examples. 2. Boundary markers: The implementation mandates HMAC-SHA256 signature verification of the raw body before parsing. 3. Capability inventory: Event handling is restricted to logging information to the console; no dangerous system commands or unauthorized network operations are included in the code provided. 4. Sanitization: Verification ensures that only authentic, untampered payloads from PagerDuty are processed by the application logic.

pagerduty-webhooks