The Agent Skills Directory

[SAFE]: The skill implements the Standard Webhooks specification correctly, providing robust signature verification to prevent request spoofing.
[SAFE]: Instructions explicitly warn against pre-parsing request bodies, which is a common security pitfall that breaks signature verification.
[SAFE]: All external dependencies are official service SDKs (@polar-sh/sdk, polar-sdk) or standard framework libraries.
[SAFE]: Local development guidance uses recognized tools like the Hookdeck CLI and Polar CLI for secure tunneling during testing.
[SAFE]: Sensitive configuration is handled via environment variables with clear documentation on using .env files for local secret management.

polar-webhooks