The Agent Skills Directory

[SAFE]: The skill provides educational boilerplate for building secure webhook receivers. All code examples for Express, Next.js, and FastAPI implement mandatory signature verification of incoming requests using the SC-Signature header to ensure data authenticity.
[EXTERNAL_DOWNLOADS]: The documentation references hookdeck-cli, a utility provided by the skill's author to facilitate local development and testing. This is a legitimate vendor tool for creating secure tunnels for webhook debugging.
[COMMAND_EXECUTION]: The project includes standard development commands for environment setup and testing, such as npm install, pip install, and npm test. These are used appropriately to manage dependencies and verify the example handlers locally.
[DATA_EXFILTRATION]: No evidence of unauthorized data access was detected. The skill uses placeholders for sensitive environment variables like the SMARTCAR_MANAGEMENT_TOKEN and instructs users on secure local management of secrets.

smartcar-webhooks