The Agent Skills Directory

[SAFE]: The skill provides correct implementations of RSA-4096 asymmetric signature verification with SHA-512 and PSS padding across multiple frameworks (Next.js, FastAPI, Express).
[EXTERNAL_DOWNLOADS]: The skill recommends using npx hookdeck-cli for local development. This is a trusted utility from the skill's author, used for creating local tunnels to test webhooks. Several dependencies in package.json and requirements.txt list version numbers that exceed currently available releases (e.g., Next.js 16, TypeScript 7, FastAPI 0.140), which indicates a generation error but does not pose a direct security risk for these well-known packages.
[CREDENTIALS_UNSAFE]: The skill correctly instructs users to store the Utila public key in environment variables and provides clear examples of how to load them safely. It correctly identifies that no shared secret is required for asymmetric signature verification.
[COMMAND_EXECUTION]: The command examples provided are standard for starting development servers and local tunnels, with no evidence of arbitrary or malicious shell command injection.

utila-webhooks