paulund/dev-webhook
dev-webhook/SKILL.md
Use when developing outgoing webhooks for applications and services.
$ install --global
skillsauthnpx skillsauth add paulund/ai dev-webhookInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 5:31 AM175.2s2 files scanned
SKILL.md
- name:
- dev-webhook
- description:
- Use when developing outgoing webhooks for applications and services.
- category:
- standards
Core Workflow
- Analyze Requirements -- Understand the events that need to trigger webhooks and the data to be included in the payload.
- Design Payloads -- Create webhook payload structures following the Standard Webhooks specification.
- Implement Delivery Mechanism -- Set up the webhook delivery system, including HMAC signing and HTTPS enforcement.
- Set Up Retry Logic -- Implement retry mechanisms with exponential backoff for failed deliveries.
- Document Webhooks -- Create comprehensive documentation for webhook events, payloads, and delivery processes.
- Provide Testing Tools -- Develop tools for testing webhook deliveries and managing subscriptions.
- Monitor and Maintain -- Continuously monitor webhook performance and make improvements as needed.
Reference Guide
| Topic | Reference | Load When |
|-------|-----------|-----------|
| Standard Webhooks | references/standard-webhooks.md | When designing or implementing outgoing webhooks for applications and services |
Constraints
MUST DO
- Follow the Standard Webhooks specification
- Implement HMAC signature generation for webhook security
- Use HTTPS for all webhook deliveries
- Set up retry logic with exponential backoff for failed deliveries
- Document all webhook events, payloads, and delivery processes
MUST NOT DO
- Send webhooks over unencrypted HTTP
- Ignore failed webhook deliveries without retrying
- Omit documentation for webhook events and payloads
Related Skills
paulund/test-driven-development
development
VerifiedTrustedCommunity
Use when implementing any logic, fixing any bug, or changing any behaviour. Use when you need to prove code works, when a bug report arrives, or when modifying existing functionality. Do NOT use for config changes, data migrations, or dependency updates.
3SKILL.mdUpdated Jul 1, 2026
paulund/spec-driven-development
development
VerifiedTrustedCommunity
Use when starting a new feature, when requirements are unclear, when asked to write code without a clear spec, or before any non-trivial implementation. Do NOT use for trivial bug fixes or one-line changes.
3SKILL.mdUpdated Jul 1, 2026
paulund/source-driven-development
development
VerifiedTrustedCommunity
Use when you want authoritative, source-cited code free from outdated patterns. Use when building with any framework or library where correctness matters. Detects the stack from dependency files, fetches official documentation, implements following documented patterns, and cites sources for every framework-specific decision.
3SKILL.mdUpdated Jul 1, 2026
paulund/shipping-and-launch
development
VerifiedTrustedCommunity
Use when preparing to ship a feature, release, or deployment. Use before merging to main, creating a release, or deploying to production. Do NOT use for CI-only changes or internal refactors that don't reach production.
3SKILL.mdUpdated Jul 1, 2026