The Agent Skills Directory

[SAFE]: Implements cryptographically secure webhook signature verification using HMAC-SHA256 with timing-safe comparison methods (timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent timing attacks.- [SAFE]: Correctness in handling the Meta verification handshake (GET) by echoing the raw challenge value only upon successful verification of the provided token.- [COMMAND_EXECUTION]: Recommends the use of the author's own CLI tool (hookdeck-cli) for local development and tunneling, which is a standard practice for webhook testing.- [EXTERNAL_DOWNLOADS]: References several standard Node.js and Python packages for web development and testing. While some version numbers (e.g., Next.js 16, TypeScript 7) appear to be non-existent or placeholders, they refer to well-known, legitimate software packages from official registries.

whatsapp-webhooks