The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The example configuration files (package.json, requirements.txt) list dependency versions that are significantly higher than currently released stable versions (e.g., Next.js ^16.2.11, TypeScript ^7.0.2, FastAPI 0.139.2). Users implementing these examples should use the current stable versions from official registries.
[EXTERNAL_DOWNLOADS]: Includes instructions to use npx hookdeck-cli for local development. This is an official utility provided by the vendor (Hookdeck) to facilitate webhook testing and tunnel creation.
[PROMPT_INJECTION]: The webhook handlers in the provided examples ingest untrusted data from external request bodies, creating a potential surface for indirect prompt injection. However, the examples limit operations to logging and basic conditional logic, posing no significant risk to the agent or host system.
Ingestion points: POST /webhooks/retell endpoint in all example implementations.
Boundary markers: Not present in the example code.
Capability inventory: The examples only perform console logging and status code responses based on the event type. No dynamic execution or sensitive data access is performed using the payload content.
Sanitization: The input is parsed as JSON, but individual field values are used directly in logs without further sanitization.
[COMMAND_EXECUTION]: Documentation provides standard commands for environment setup and application execution (e.g., npm install, pip install, uvicorn, npm run dev). These are routine for the development workflows described.
[DATA_EXFILTRATION]: The skill uses environment variables for sensitive API keys. It correctly demonstrates best practices by advising the use of .env files and providing .env.example templates to prevent accidental exposure of credentials.

retell-webhooks