paulund/dev-webhook
dev-webhook/SKILL.md
Use when developing outgoing webhooks for applications and services.
$ install --global
skillsauthnpx skillsauth add paulund/skills dev-webhookInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 5:31 AM175.2s2 files scanned
SKILL.md
- name:
- dev-webhook
- description:
- Use when developing outgoing webhooks for applications and services.
- category:
- standards
Core Workflow
- Analyze Requirements -- Understand the events that need to trigger webhooks and the data to be included in the payload.
- Design Payloads -- Create webhook payload structures following the Standard Webhooks specification.
- Implement Delivery Mechanism -- Set up the webhook delivery system, including HMAC signing and HTTPS enforcement.
- Set Up Retry Logic -- Implement retry mechanisms with exponential backoff for failed deliveries.
- Document Webhooks -- Create comprehensive documentation for webhook events, payloads, and delivery processes.
- Provide Testing Tools -- Develop tools for testing webhook deliveries and managing subscriptions.
- Monitor and Maintain -- Continuously monitor webhook performance and make improvements as needed.
Reference Guide
| Topic | Reference | Load When |
|-------|-----------|-----------|
| Standard Webhooks | references/standard-webhooks.md | When designing or implementing outgoing webhooks for applications and services |
Constraints
MUST DO
- Follow the Standard Webhooks specification
- Implement HMAC signature generation for webhook security
- Use HTTPS for all webhook deliveries
- Set up retry logic with exponential backoff for failed deliveries
- Document all webhook events, payloads, and delivery processes
MUST NOT DO
- Send webhooks over unencrypted HTTP
- Ignore failed webhook deliveries without retrying
- Omit documentation for webhook events and payloads
Related Skills
paulund/quality-gate
development
VerifiedTrustedCommunity
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
2SKILL.mdUpdated May 10, 2026
paulund/pr-verify
tools
VerifiedTrustedCommunity
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
2SKILL.mdUpdated May 10, 2026
paulund/pr-security-review
testing
VerifiedTrustedCommunity
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
2SKILL.mdUpdated May 10, 2026
paulund/pr-open
testing
VerifiedTrustedCommunity
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".
2SKILL.mdUpdated May 10, 2026