fedify-dev/inbox
claude-plugin/skills/inbox/SKILL.md
Help the user set up Fedify inbox listeners for handling incoming ActivityPub activities. Use when the user needs to handle Follow, Like, Announce, Create, Undo, or other activity types delivered to their inbox.
$ install --global
skillsauthnpx skillsauth add fedify-dev/fedify inboxInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 9, 2026, 4:48 AM182.9s1 file scanned
SKILL.md
- name:
- inbox
- description:
- >-
Help the user configure Fedify inbox listeners.
Walk through:
- Calling
setInboxListeners(inboxPath, sharedInboxPath?)on theFederation/FederationBuilder. - Chaining
.on(ActivityType, handler)for each activity type to handle (Follow,Create,Undo,Like,Announce, etc.). - Adding
.onError(handler)for error logging. - Optionally adding
.onUnverifiedActivity(handler)if the user needs to inspect activities that failed signature verification. - Using
.withIdempotency(strategy)to avoid duplicate processing. - Noting that activity types with no registered handler receive HTTP 202
and are logged as unsupported: add a catch-all on the base
Activityclass if needed.
Reference: https://fedify.dev/manual/inbox
Related Skills
fedify-dev/migration
development
VerifiedTrustedCommunity
Help the user migrate Fedify code between versions. Use when the user needs to upgrade their Fedify version, fix breaking-change errors, or update deprecated API usage.
968SKILL.mdUpdated May 9, 2026
fedify-dev/fep
testing
VerifiedTrustedCommunity
Look up a Fediverse Enhancement Proposal (FEP) and explain how to implement it with Fedify. Use when the user asks about a specific FEP by ID (e.g., FEP-8fcf, FEP-1b12) or wants to implement a fediverse standard in their Fedify application.
968SKILL.mdUpdated May 9, 2026
fedify-dev/fedify
tools
VerifiedTrustedCommunity
Use this skill whenever writing JavaScript or TypeScript code that uses Fedify to build an ActivityPub server, handle federation activities, implement fediverse features, or integrate Fedify with a web framework such as Hono, Express, Next.js, Nuxt, Fastify, Koa, NestJS, Astro, SvelteKit, Fresh, h3, Elysia, or Cloudflare Workers. Covers the `Federation` builder pattern, actor/inbox/outbox/collection dispatchers, inbox listeners, vocabulary objects from `@fedify/vocab`, key pair management, HTTP Signatures, Object Integrity Proofs, the `KvStore` and `MessageQueue` interfaces, database adapter packages, structured logging with LogTape, OpenTelemetry tracing, the `fedify` CLI toolchain, and common mistakes. Also apply when the user mentions ActivityPub, federation, fediverse, WebFinger, NodeInfo, FEPs, or Mastodon interoperability, even if they do not name Fedify explicitly.
968SKILL.mdUpdated May 9, 2026
fedify-dev/docs
development
VerifiedTrustedCommunity
Fetch and explain Fedify documentation on a specific topic. Use when the user asks about Fedify API details, configuration options, or how a specific feature works. Fetches up-to-date docs from fedify.dev.
968SKILL.mdUpdated May 9, 2026