inspect
Free webhook test URLs from Hookdeck Inspect, with no account or login. Creates a URL with one HTTP call, waits for webhooks to arrive, and reads their headers and exact bodies as JSON. Use when asked to get a webhook test URL, see what a webhook sent, wait or watch for a webhook, debug a webhook payload or signature, or send test webhooks, or when given an inspect.hookdeck.com URL. For permanent webhook setups with connections, retries and an account, use event-gateway instead.
95%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The agent skill monitors incoming webhook payloads and headers from Hookdeck Inspect URLs, which are submitted by external third parties (webhook senders).
- Repository
hookdeck/agent-skills
- Revision
efe1e08
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.