The Agent Skills Directory

[SAFE]: The skill provides robust implementation examples for Uber Eats webhook signature verification using HMAC-SHA256. It correctly employs timing-safe comparison functions (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent timing side-channel attacks.
[SAFE]: Security best practices are followed for credential management by instructing users to store the UBER_CLIENT_SECRET in environment variables (.env files) rather than hardcoding them in the source code.
[COMMAND_EXECUTION]: The documentation references the use of hookdeck-cli via npx for local development. This is a legitimate tool provided by the skill's author for webhook tunneling and inspection.
[EXTERNAL_DOWNLOADS]: The project dependencies listed in package.json and requirements.txt consist of standard, reputable libraries (such as express, fastapi, next, dotenv, and pytest) fetched from official package registries.

uber-webhooks