The Agent Skills Directory

[SAFE]: The skill demonstrates secure implementation of webhook signature verification.
Uses crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python to prevent timing attacks during signature comparison.
Implements a 5-minute timestamp validation window (300,000 ms) to mitigate replay attacks.
Correctly emphasizes the use of the raw request body for verification to prevent common parsing-related vulnerabilities.
[EXTERNAL_DOWNLOADS]: The documentation recommends installing the Hookdeck CLI for local development.
Evidence: npm install -g hookdeck-cli and brew install hookdeck/hookdeck/hookdeck suggested in SKILL.md and README.md files.
Context: Hookdeck is the author of this skill, and the tool is an official utility provided by the vendor for webhook testing. This is a standard and safe recommendation for the intended use case.

webflow-webhooks