The Agent Skills Directory

[SAFE]: The skill demonstrates secure webhook handling practices using the official svix SDK for both Node.js and Python. It correctly emphasizes verifying the raw request body before any JSON parsing to ensure signature integrity.
[SAFE]: Example implementations for Express, Next.js, and FastAPI follow industry-standard security patterns, such as using environment variables for secrets and returning generic error messages when verification fails.
[SAFE]: The test suites use hardcoded mock secrets (e.g., whsec_dGVzdF9zZWNyZXRfa2V5X2Zvci13ZWJob29rcw==) clearly intended for verification logic testing, posing no risk to production environments.
[SAFE]: Guidance on handling secret rotation and timestamp tolerance aligns with the Standard Webhooks specification, ensuring robust and secure operational handling.

svix-webhooks