The Agent Skills Directory

[SAFE]: The skill provides legitimate implementation examples for Revolut webhook integration across multiple popular web frameworks.
[SAFE]: Signature verification logic correctly follows security best practices by using the raw request body and performing constant-time comparisons (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent timing attacks.
[SAFE]: External dependencies listed are standard libraries for the respective ecosystems. While several version numbers in the configuration files (e.g., TypeScript 7.0.2, Jest 30.4.2) appear significantly higher than currently available releases, they refer to well-known packages from official registries and do not exhibit suspicious behavior.
[SAFE]: The instructions for using hookdeck-cli refer to an official developer tool from the skill's author for local development and do not constitute a security risk.

revolut-webhooks