Agent skill · software engineering · aj-geddes
webhook-integration
Implement secure webhook systems for event-driven integrations, including signature verification, retry logic, and delivery guarantees. Use when building third-party integrations, event notifications, or real-time data synchronization.
Why this skill is useful
Provides specific implementation patterns and best practices for secure webhook systems that the AI wouldn't reliably generate on its own.
What it needs
Requires axios installed locally. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Webhook Integration Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Implement robust webhook systems for event-driven architectures, enabling real-time communication between services and third-party integrations. When to Use Third-party service integrations (Stripe, GitHub, Shopify) Event notification systems Real-time data synchronization Automated workflow triggers Payment processing callbacks CI/CD pipeline notifications User activity tracking Microservices communication Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Webhook Sender (TypeScript) Webhook Sender (TypeScript) Webhook Receiver (Express) Webhook Receiver (Express) Webhook Queue with Bull Webhook Queue with Bull Webhook Testing Utilities Webhook Testing Utilities Best Practices ✅ DO Use HMAC signatures for verification Implement idempotency with event IDs Return 200 OK quickly, process asynchronously Implement exponential backoff for retries Include timestamp to prevent replay attacks Use queue systems for reliable delivery Log all delivery attempts Provide webhook testing tools Document webhook payload schemas Implement webhook management UI Allow filtering by event types Support webhook versioning ❌ DON'T Send sensitive data in webhooks Skip signature verification Block responses with heavy processing Retry indefinitely Expose internal error details Send webhooks to localhost (in production) Forget timeout handling Skip rate limiting
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/webhook-integration