The Agent Skills Directory

[SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected.
[EXTERNAL_DOWNLOADS]: The skill correctly references official packages and vendor-owned tools. It utilizes the official @workos-inc/node SDK and suggests using hookdeck-cli (provided by the skill's author, hookdeck) for local development tunneling. These are documented neutrally and serve the skill's primary purpose.
[COMMAND_EXECUTION]: Provides standard instructions for dependency installation (npm install, pip install) and local server management (npm start, uvicorn). No suspicious or high-privilege command patterns (like sudo or piped remote scripts) were found.
[DATA_EXFILTRATION]: Environment variable examples for WORKOS_API_KEY and WORKOS_WEBHOOK_SECRET use explicitly labeled placeholders and instruct the user to manage them locally. There is no code that attempts to harvest or transmit these credentials to unauthorized third parties.

workos-webhooks