Agent skill · software engineering · jeremylongshore
abridge-webhooks-events
Implement and verify callbacks only from an approved tenant-specific Abridge event contract, with replay and PHI protections. Use when vendor implementation documents authorize event delivery. Trigger with \"build the Abridge event handler\".
Why this skill is useful
Provides specific implementation details for handling Abridge webhook events, which are crucial for clinical documentation workflows.
What it needs
Requires abridge account access. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Abridge Partner Event Contract Handler Overview Build a fail-closed receiver whose transport, authentication, event names, schema, delivery semantics, and registration process come from the approved private contract. If no such contract exists, produce a polling or manual handoff design instead of inventing webhooks. Prerequisites The authorized Abridge environment, clinical owner, and health-system policy set Current tenant-specific implementation evidence for every private interface in scope Synthetic data or the organization's formally approved test-record procedure Tool Discipline Use Read, Glob, and Grep to inspect repository configuration, adapters, tests, policies, and existing evidence. Use WebFetch only for current official Abridge, HHS, or named EHR documentation. Use Write or Edit only after confirming scope, environment, owners, patient-data boundary, and approval state. These tools do not confer access to Abridge, an EHR, or a clinical record; return exact operator steps or an approval-gated handoff for live actions. Current Contract The cited public Abridge materials do not publish a universal webhook catalog, HMAC header, registration endpoint, or retry schedule. Session or encounter identifiers can be sensitive even when a payload omits note text. Duplicate, delayed, and out-of-order delivery must not duplicate EHR actions. Authentication Use only the health system's provisioned Abridge application access, SSO, administrative role, or tenant-specific partner authentication documented for the approved environment. Do not infer public API credentials, reuse production secrets in tests, or expose tokens and session material. Verify identity owner, least privilege, environment binding, storage, rotation, and revocation before any authenticated action. Instructions 1. Verify contract owner, revision, event purpose, transport, authentication, schema, ordering, retry, retention, and support route. 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/abridge-webhooks-events