The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the primitive CLI tool (the vendor's own command-line interface) to manage webhooks, endpoints, and routes. These operations are within the scope of the skill's intended functionality.
[EXTERNAL_DOWNLOADS]: The skill references the installation of official vendor packages: @primitivedotdev/cli and @primitivedotdev/sdk via npm, and primitivedotdev via pip. These are standard dependencies for the developer tools being documented.
[INDIRECT_PROMPT_INJECTION]: As the skill involves processing external data (inbound emails), it explicitly warns that users must treat email content as untrusted input rather than instructions. It also provides a robust signature verification mechanism using HMAC-SHA256 to ensure data authenticity.
[CREDENTIALS_SAFE]: The documentation follows security best practices by instructing the user to store secrets in environment variables or secret stores rather than source control, and provides SDK methods for secure verification.

primitive-webhooks