CtrlK
BlogDocsLog inGet started
Tessl Logo

alchemy-webhooks

Receive and verify Alchemy Notify webhooks. Use when setting up Alchemy webhook handlers, debugging X-Alchemy-Signature verification, or handling onchain events like ADDRESS_ACTIVITY, NFT_ACTIVITY, or GRAPHQL (Custom Webhook).

70

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

72%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with excellent executable verification code and well-organized real references, but it loses points for referencing non-existent example directories and for an implied rather than explicitly sequenced handler workflow with in-body validation checkpoints.

Suggestions

Create or remove the referenced examples/express/, examples/nextjs/, and examples/fastapi/ directories — they are cited as the source for 'complete handlers with route wiring, event dispatch, and tests' but do not exist, breaking navigation.

Add an explicit numbered receive→verify→handle workflow with a validation checkpoint (e.g., verify signature before parsing, handle idempotently via webhook id) rather than deferring the entire handler sequence to the external webhook-handler-patterns skill.

Trim the deprecated-types prose (the 'observed absence, not vendor-announced removal' rationale) to a concise note, since the deprecation status is already clear from the table.

DimensionReasoningScore

Conciseness

Dense and largely free of basic-concept padding, but the deprecated-types prose ('observed absence, not a vendor-announced removal... no successor event is claimed') and the four-link webhook-handler-patterns block are somewhat over-explained and could be trimmed.

4 / 5

Actionability

Provides a complete, copy-paste-ready HMAC verification function with timingSafeEqual and raw-body handling, plus concrete env vars, an npx tunnel command, and specific egress IPs — fully executable guidance covering the core case.

5 / 5

Workflow Clarity

The verification core has a guard (try/catch on length mismatch) but the broader receive→verify→dispatch workflow is implied rather than an explicit numbered sequence, and idempotency/retry validation is deferred to an external skill rather than sequenced in-body.

3 / 5

Progressive Disclosure

Structure and the three real reference files (overview.md, setup.md, verification.md) are well signaled one level deep, but the body points to examples/express/, examples/nextjs/, and examples/fastapi/ as 'complete handlers with route wiring, event dispatch, and tests' — none of these directories exist, a navigation failure that prevents the top score.

3 / 5

Total

15

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is exemplary: third-person voice, concrete actions, explicit 'Use when' triggers, and Alchemy-specific terms that make it both discoverable and distinct. It cleanly matches the top anchor on every dimension.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Receive and verify Alchemy Notify webhooks', 'setting up Alchemy webhook handlers', 'debugging X-Alchemy-Signature verification', 'handling onchain events' — giving comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Explicitly answers both 'what' (receive and verify Alchemy Notify webhooks) and 'when' ('Use when setting up... debugging... or handling onchain events') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural-term coverage including the exact event strings users would cite ('ADDRESS_ACTIVITY', 'NFT_ACTIVITY', 'GRAPHQL'), 'X-Alchemy-Signature verification', and 'Alchemy Notify webhooks'.

5 / 5

Distinctiveness Conflict Risk

Tightly scoped to Alchemy-specific signals (X-Alchemy-Signature, Alchemy Notify, named event types), giving it a clear niche with minimal overlap risk against other webhook skills.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 missing

Warning

Total

15

/

16

Passed

Repository
hookdeck/webhook-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.