Webhook Skills
Hundreds of per-provider skills teach an agent to receive webhooks, verify signatures and handle events, with code examples.
- 101 ★ on the repository
- Last commit
- MIT
Minimal access
Why this level
- The skills provide instructions and code; you enter signing secrets into environment variables yourself.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/webhook-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewMinimal accessThe tool runs nothing and makes no network calls.
- The skills provide instructions and code; you enter signing secrets into environment variables yourself.
This is third-party code. Review the repository files before installing.
What it does
The Hookdeck repository collects skills for agents that receive webhooks from external services, verify signatures, handle events, keep handlers idempotent and replay deliveries. Each skill covers one provider and contains setup instructions, signature verification code and runnable examples for Express, Next.js and FastAPI. The `skills/` folder holds more than eight hundred directories: Stripe, Shopify, GitHub, Adyen and many more. The README table lists each provider's protection scheme, for example HMAC-SHA256 over the raw request body or a shared secret in a header. The skills suit Claude Code, Cursor, VS Code Copilot and other agents that follow the Agent Skills specification.
Who it is for. Backend developers wiring up payments, shops and other services who want a working webhook handler with signature verification on the first try.
Good fit when
- Stripe or Shopify is being connected and the handler must verify the signature over the raw request body.
- A provider without signatures protects itself with a shared header secret and a constant-time comparison is needed.
- An `order/paid` event arrives twice and reprocessing is not acceptable.
- Webhooks are debugged on localhost through a tunnel without registering in a service.
Not a fit when
- The provider is not in the table, so the signature scheme must be described by hand.
- You need a ready delivery service with queues and retries: the skills give code and instructions.
- Your stack is not Express, Next.js or FastAPI and the examples need porting.
Example request
Add a Stripe webhook handler to my Express project with signature verification and protection against duplicate event processing.Limitations
Examples target Express, Next.js and FastAPI, and other stacks need porting. Not every provider signs requests: some schemes rely on a shared header secret. The agent should read webhook secrets from environment variables, never from code. The `npx hookdeck-cli listen` tunnel belongs to the Hookdeck service, not to the skills themselves. Install skills selectively: the repository is too large to pull in whole.
How to disable. Delete the skill from the agent's skills directory or run `/plugin uninstall` for a plugin. The `webhook-skills` marketplace configuration can be removed with `/plugin marketplace remove`.
FAQ
How do I install a single skill?
With `npx skills add hookdeck/webhook-skills --skill stripe-webhooks`, substituting your provider for `stripe-webhooks`. `--list` prints the available ones.
How do I connect through Claude Code plugins?
Run `/plugin marketplace add hookdeck/webhook-skills`, then `/plugin install stripe-webhooks@webhook-skills` for one skill or `webhook-skills@webhook-skills` for the bundle.
How do I debug webhooks locally?
The README gives `npx hookdeck-cli listen 3000 stripe --path /webhooks/stripe`: a tunnel to localhost with no install and no account.
What is inside a provider skill?
A setup guide, signature verification code and runnable examples. The README table gives each provider's signature header, algorithm and handled events.
Is a Hookdeck account required?
Not for the `hookdeck-cli listen` tunnel: it runs through `npx` with no install and no account.
Discussion
No questions or reviews yet.
Related
SkillsOfficial Clerk skills that teach an agent to add authentication to Next.js, React, Vue, Expo, Swift and Android apps
Laravel Agent Skills
laravel-agent-skills
Laravel's official skill collection for Claude Code and Cursor: plugins for Laravel, Laravel Cloud and Nightwatch
The official FastAPI skill, bundled with the package, teaching agents to write code for the installed version
Sixteen Spring Boot skills: the agent explores the application first, then edits JPA, DTOs, REST, Security, Kafka and tests.
Three backend skills for agents that guard access, data and schema migrations: 2 of 150 runs had critical mistakes instead of 25.
Six skills that teach an agent to write Streamling plugins in Rust: sources, sinks, transforms and SQL functions.
README in short
The repository is designed to be found by agents through registries such as `find-skills`, by provider or task. The README provider table is generated from `providers/<name>.yaml` files.