The Agent Skills Directory

[SAFE]: The skill serves as a high-quality technical reference for implementing secure webhook systems. It covers critical security aspects including signature verification, secret rotation, and idempotency.
[CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive files are accessed. The code snippets correctly utilize secure random number generation (crypto.randomBytes) and suggest storing configuration in environment variables.
[REMOTE_CODE_EXECUTION]: No patterns for remote code execution or suspicious downloads from untrusted sources were found. The use of external packages like axios and express is consistent with the skill's purpose.
[PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior, bypass safety guardrails, or extract system prompts.
[DATA_EXFILTRATION]: No indicators of data exfiltration were identified. Network operations are described within the context of legitimate service-to-service communication.

backend-webhooks