CtrlK
BlogDocsLog inGet started
Tessl Logo

airtable-webhooks

Receive and verify Airtable webhooks. Use when setting up Airtable webhook handlers, debugging X-Airtable-Content-MAC signature verification, handling the thin-ping notification, or fetching base changes (tableData, tableFields, tableMetadata add/remove/update) from the webhook payloads API.

71

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable skill body with dual-language verify code, a clear thin-ping model, and dense gotchas, supported by real one-level reference files. Its main gaps are a payloads-fetch loop left as prose and example/ links that do not resolve in the bundle.

Suggestions

Add an executable payloads-fetch loop snippet (cursor pagination while mightHaveMore) alongside the verify functions so the common handler path is fully copy-paste ready.

Either include the examples/express, examples/nextjs, and examples/fastapi directories in the bundle or remove/qualify those inline links so navigation resolves.

Trim the Attribution block and the Related Skills / Recommended-skill link lists (or move them to a single references file) to recover tokens without losing the core guidance.

DimensionReasoningScore

Conciseness

The body is lean and assumes Claude's competence (no padding about what HMAC or webhooks are), but the Attribution block, the 'Recommended: webhook-handler-patterns' section with four external links, and the six-entry Related Skills list add tokens beyond the core task; not a 5 because those navigation/link sections could be trimmed, and not a 3 because the technical content itself is efficient.

4 / 5

Actionability

Provides complete copy-paste verify() functions in both Node and Python, concrete env vars, a dev command, and the exact payloads endpoint with cursor/limit semantics; not a 5 because the payloads fetch loop is described in prose ('loop while true; max limit is 50') rather than as executable code, leaving a minor gap in the most common handler path.

4 / 5

Workflow Clarity

The two-step thin-ping model is clearly sequenced (respond 200/204 within 25s, then fetch payloads by cursor) and signature verification acts as the validation checkpoint, with retry/rate-limit recovery in Gotchas; not a 5 because the full receive→verify→fetch→handle flow is distributed across sections rather than presented as one numbered workflow with explicit inline checkpoints.

4 / 5

Progressive Disclosure

SKILL.md stays an overview and pushes detail to well-signaled one-level-deep references (references/overview.md, setup.md, verification.md — all present in the bundle); not a 5 because the body also references examples/express/, examples/nextjs/, and examples/fastapi/ which do not exist in the bundle, creating broken navigation paths.

4 / 5

Total

16

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, third-person description that names concrete actions and gives an explicit 'Use when...' trigger list covering setup, signature debugging, thin-ping handling, and payload fetching. It is comprehensive, distinct, and free of vague fluff.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Receive and verify Airtable webhooks', 'setting up Airtable webhook handlers', 'debugging X-Airtable-Content-MAC signature verification', 'handling the thin-ping notification', 'fetching base changes (tableData, tableFields, tableMetadata add/remove/update)' — with comprehensive coverage; not a 4 because coverage spans setup, debugging, notification handling, and payload fetching rather than having minor gaps.

5 / 5

Completeness

Explicitly answers 'what' ('Receive and verify Airtable webhooks... fetching base changes') and 'when' with a concrete 'Use when...' clause enumerating setup, debugging, thin-ping handling, and payload fetching; not a 4 because both halves are explicit and trigger phrases are concrete rather than merely implied.

5 / 5

Trigger Term Quality

Comprehensive natural keywords a user would say — 'Airtable webhooks', 'webhook handlers', 'signature verification', 'X-Airtable-Content-MAC', 'thin-ping notification', 'fetch base changes', plus the data-type/change-type vocabulary — covering synonyms and the API surface; not a 4 because both lay and technical phrasings are present.

5 / 5

Distinctiveness Conflict Risk

A clear Airtable-specific niche with triggers ('X-Airtable-Content-MAC', 'thin-ping', 'tableData/tableFields/tableMetadata') unlikely to fire for other webhook skills; minimal conflict risk; not a 4 because the triggers are provider-unique rather than sharing only minor overlap.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 missing

Warning

Total

15

/

16

Passed

Repository
hookdeck/webhook-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.