Verify GitHub webhooks before handling events.
What it does
Guides implementation and debugging of GitHub webhook handlers with signature verification.
When to use it
Use when setting up webhook handlers, debugging signature verification, understanding event payloads, or handling repository events.
How to use it
It changes how the agent implements GitHub webhook handlers by requiring raw-body verification with the SHA-256 signature header and timing-safe comparison.
What you provide
- An existing project
Uses
Latest review
What you need · 1
The handler reads the webhook secret from the environment to verify GitHub webhook signatures.
Access · 2
This skill
GitHub
Read
Reads handler guidance on GitHub
hookdeck-cli
Execute
Starts a local webhook tunnel