The Agent Skills Directory

[SAFE] (SAFE): The implementation of signature verification for OpenAI webhooks follows cryptographic best practices, utilizing HMAC-SHA256 and timing-safe comparisons (hmac.compare_digest in Python, crypto.timingSafeEqual in Node.js).
[CREDENTIALS_UNSAFE] (SAFE): No sensitive keys or tokens are hardcoded; environment variables are managed via placeholders in example configuration files.
[EXTERNAL_DOWNLOADS] (SAFE): All listed dependencies are well-known, reputable libraries for web development and testing. While some version numbers (e.g., Next.js 16, Express 5.2) appear to be future-dated, the provided code logic is standard and secure for its stated purpose.

openai-webhooks