CtrlK
BlogDocsLog inGet started
Tessl Logo

asana-webhooks

Receive and verify Asana webhooks. Use when setting up Asana webhook handlers, implementing the X-Hook-Secret handshake, debugging X-Hook-Signature verification, or handling task, project, and story events like added, changed, removed, deleted, and undeleted.

73

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable skill body with executable Node/Python verification code, clear two-phase sequencing, and properly signaled one-level-deep reference files. It loses a little on conciseness (some padded prose and a long related-skills list) and on progressive disclosure due to dangling examples/ paths not present in the bundle.

Suggestions

Trim explanatory restatements (e.g., 'Store the secret — it is the key for verifying every future delivery') where the preceding step already implies the instruction, to tighten the conciseness score.

Add an explicit validate→fix→retry note for failed signature checks (e.g., what to log and which HTTP status to return) to raise workflow clarity.

Either add the missing examples/express, examples/nextjs, and examples/fastapi directories to the bundle or reword those links as external/optional so progressive-disclosure navigation is not broken.

DimensionReasoningScore

Conciseness

Largely lean with executable code and tables earning their tokens, but contains some trimmable explanatory prose ('Store the secret — it is the key for verifying every future delivery') and a long Related Skills list, keeping it just below the 'every token earns its place' bar.

4 / 5

Actionability

Provides fully executable, copy-paste-ready verification functions in both Node and Python, plus concrete curl, env-var, and tunnel commands that cover the common handler cases.

5 / 5

Workflow Clarity

The two-phase handshake/delivery flow is clearly sequenced and signature verification serves as the validation checkpoint, but there is no explicit validate→fix→retry feedback loop for failed verifications, so it falls short of the 5 anchor.

4 / 5

Progressive Disclosure

Good structure with three real one-level-deep references (references/overview.md, setup.md, verification.md) clearly signaled in a Reference Materials section, but the body also links examples/express/, examples/nextjs/, and examples/fastapi/ directories that are absent from the bundle, a minor organization gap.

4 / 5

Total

17

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that concretely states capabilities and pairs them with an explicit 'Use when' trigger clause covering setup, debugging, and event handling. It is specific, well-triggered, and clearly distinguishable from sibling webhook skills.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'Receive and verify Asana webhooks', 'implementing the X-Hook-Secret handshake', 'debugging X-Hook-Signature verification', and 'handling task, project, and story events like added, changed, removed, deleted, and undeleted' — with comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Explicitly answers both 'what' ('Receive and verify Asana webhooks') and 'when' via a concrete 'Use when setting up... implementing... debugging... or handling...' trigger clause, matching the 5-anchor example.

5 / 5

Trigger Term Quality

Comprehensive natural-term coverage — 'Asana webhooks', 'webhook handlers', 'X-Hook-Secret handshake', 'X-Hook-Signature verification', and the full set of event-action synonyms a user would name when needing this skill.

5 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (Asana webhooks, X-Hook-Secret/X-Hook-Signature) with distinct triggers unlikely to fire for other webhook skills; minimal conflict risk.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 missing

Warning

Total

15

/

16

Passed

Repository
hookdeck/webhook-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.