The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of WooCommerce webhook payloads.
Ingestion points: Webhook handlers located in examples/express/src/index.js, examples/nextjs/app/webhooks/woocommerce/route.ts, and examples/fastapi/main.py receive external HTTP POST requests.
Boundary markers: The instructions and code samples mandate the use of the X-WC-Webhook-Signature header for authenticity verification before any data processing occurs.
Capability inventory: The provided handlers are restricted to logging payload metadata and returning HTTP status codes; no dangerous actions such as command execution or unauthorized file writes are performed with the ingested data.
Sanitization: Signature verification logic correctly utilizes timing-safe comparison functions (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to prevent timing attacks.
[EXTERNAL_DOWNLOADS]: The skill recommends using the Hookdeck CLI for local development and testing.
Evidence: SKILL.md suggests running npx hookdeck-cli listen to create a local tunnel.
Context: This is a standard vendor-provided tool intended for development workflows, matching the skill author's identity.

woocommerce-webhooks