This repository contains webhook-related skills for AI coding agents that need to receive, verify signatures, handle events, retry deliveries, or debug webhook integrations from various providers (see Provider Webhook Skills table below).
Skills provide step-by-step instructions, signature verification code, and runnable examples for Express, Next.js, and FastAPI.
Works with Claude Code, Cursor, VS Code Copilot, and other AI coding assistants that support the Agent Skills specification.
When Should an Agent Use These Skills?
Use these webhook skills when:
- You need to receive webhooks from third-party providers (Stripe, Shopify, GitHub, etc.)
- You need to verify webhook signatures to ensure authenticity
- You need to handle webhook event payloads and extract data
- You need to implement idempotency for webhook handlers
- You need to retry or replay failed webhook deliveries
- You need provider-specific webhook handling logic (e.g., Stripe checkout events, GitHub push events)
Skill Discovery
These skills are designed to be discoverable by agents using skill registries and tools like find-skills, where an agent searches for webhook-related capabilities by provider or task.
Available Webhook Skills
Provider Webhook Skills
Skills for receiving and verifying webhooks from specific providers. Each includes setup guides, webhook signature verification, and runnable examples.
| Provider | Skill | What It Does |
|---|---|---|
| Adyen | adyen-webhooks |
Verify Adyen webhook HMAC signatures (additionalData.hmacSignature), handle AUTHORISATION, CAPTURE, and REFUND notifications |
| Akeneo | akeneo-webhooks |
Verify Akeneo PIM Events API webhook signatures (x-akeneo-request-signature, HMAC-SHA256 hex over timestamp.body), handle batched product and product-model events like product.created, product.updated, product.removed, product_model.created, product_model.updated, and product_model.removed |
| Ashby | ashby-webhooks |
Verify Ashby webhook signatures (Ashby-Signature, HMAC-SHA256 hex over the raw body), handle recruiting events like applicationSubmit, candidateHire, candidateStageChange, and interviewScheduleCreate |
| Alipay | alipay-webhooks |
Verify Alipay (Antom / Alipay+) webhook signatures (Signature header, RSA256 / SHA256withRSA, base64URL over <METHOD> <URI>\n<Client-Id>.<Request-Time>.<body>), sign the acknowledgement response, handle notifyPayment, notifyCapture, notifyRefund, notifyAuthorization, and notifyDispute events |
| Alchemy | alchemy-webhooks |
Verify Alchemy Notify webhook signatures (X-Alchemy-Signature, HMAC-SHA256 hex over the raw body), handle ADDRESS_ACTIVITY, NFT_ACTIVITY, and GRAPHQL events |
| Asana | asana-webhooks |
Complete the Asana X-Hook-Secret handshake, verify X-Hook-Signature (HMAC-SHA256), handle batched compact events and heartbeats |
| Ascend | ascend-webhooks |
Verify Ascend insurance-payment webhook signatures (X-Ascend-Signature, HMAC-SHA256 hex over <timestamp>:<raw_body>), handle invoice.paid, invoice.voided, payout.paid, and refund.paid events |
| Aircall | aircall-webhooks |
Verify |
No comments yet.