CtrlK
BlogDocsLog inGet started
Tessl Logo

adyen-webhooks

Receive and verify Adyen webhooks (standard notifications). Use when setting up Adyen webhook handlers, debugging HMAC signature verification, or handling payment events like AUTHORISATION, CAPTURE, REFUND, CANCELLATION, and CHARGEBACK.

68

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, largely executable skill body centered on the genuinely non-obvious HMAC verification algorithm, with clear reference file navigation. Weakest on workflow clarity (no explicit validation/error-recovery feedback loop for batch notification handling) and slightly padded by the sibling-skills listings.

Suggestions

Add an explicit validation checkpoint and failure-recovery loop: after verifying each item's HMAC, state what to do on failure (e.g. log + 401/reject, do not acknowledge) before acknowledging valid items, to lift workflow_clarity above the batch-cap of 3.

Remove or fix the broken examples/express|nextjs|fastapi/ references — either add those example directories to the bundle or relink to the existing references/ files so all in-body paths resolve.

Trim the 'Related Skills' and 'Recommended: webhook-handler-patterns' sections to bare links without per-entry descriptions to reduce token padding.

DimensionReasoningScore

Conciseness

Mostly lean and assumes competence (the HMAC field order, escaping, and hex-decode gotchas are non-obvious and earn their place), but the 'Recommended' and 'Related Skills' sections list eight-plus sibling skills with per-link descriptions that pad the token budget.

4 / 5

Actionability

Provides copy-paste-ready JS SDK and Python HMAC code plus env vars and a tunnel command, but defers full handler wiring to examples/express|nextjs|fastapi/ paths that are not present in the bundle, leaving a minor gap.

4 / 5

Workflow Clarity

The two-step sequence (verify HMAC on each item, then acknowledge with [accepted]) is clear, but there is no explicit validation checkpoint or failure-recovery loop for invalid signatures or batch items, which the rubric caps at 3 for batch webhook processing.

3 / 5

Progressive Disclosure

Good one-level-deep structure with a clearly signaled 'Reference Materials' section pointing to real files (overview.md, setup.md, verification.md), but the body also cites examples/express|nextjs|fastapi/ directories that do not exist in the bundle — a minor navigation gap.

4 / 5

Total

15

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that crisply states what the skill does and when to use it, with concrete actions and natural trigger terms including the relevant event codes. No fluff or over-claims.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Receive and verify Adyen webhooks', 'setting up Adyen webhook handlers', 'debugging HMAC signature verification', 'handling payment events like AUTHORISATION, CAPTURE, REFUND, CANCELLATION, and CHARGEBACK' — with comprehensive coverage of the domain.

5 / 5

Completeness

Explicitly answers both what ('Receive and verify Adyen webhooks (standard notifications)') and when ('Use when setting up Adyen webhook handlers, debugging HMAC signature verification, or handling payment events like...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Covers the natural phrases users say ('Adyen webhooks', 'HMAC signature verification', the named event codes) plus a synonym ('standard notifications'), matching the comprehensive-coverage anchor.

5 / 5

Distinctiveness Conflict Risk

Adyen-specific niche with distinct triggers (Adyen webhooks, HMAC verification, Adyen event codes) that minimize overlap with sibling provider skills; the named event codes anchor it to a clear niche.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 missing

Warning

Total

15

/

16

Passed

Repository
hookdeck/webhook-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.