CtrlK
BlogDocsLog inGet started
Tessl Logo

clerk-webhooks

Receive and verify Clerk webhooks. Use when setting up Clerk webhook handlers, debugging signature verification, or handling user events like user.created, user.updated, session.created, or organization.created.

88

1.47x
Quality

81%

Does it follow best practices?

Impact

100%

1.47x

Average score across 3 eval scenarios

SecuritybySnyk

Advisory

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Evaluation results

100%

50%

User Sync Service with Clerk Webhooks

Express webhook handler setup

Criteria
Without context
With context

standardwebhooks package

0%

100%

express.raw middleware

100%

100%

Header name mapping

0%

100%

Secret format validation

0%

100%

Dual env var support

0%

100%

Missing headers check

100%

100%

Handles user.created

100%

100%

Handles user.updated

100%

100%

Handles user.deleted

100%

100%

Attribution comment

0%

100%

Lowercase header access

100%

100%

Verification error handling

100%

100%

100%

45%

Clerk Event Sync for Next.js App

Next.js App Router webhook route

Criteria
Without context
With context

Correct import path

0%

100%

verifyWebhook usage

0%

100%

Dual env var support

0%

100%

Route made public

100%

100%

Handles user.created

100%

100%

Handles user.updated

100%

100%

Handles user.deleted

100%

100%

Attribution comment

0%

100%

Verification error → 400

100%

100%

Success → 200

100%

100%

100%

Clerk Webhook Security Module

Manual signature verification

Criteria
Without context
With context

Signed content format

100%

100%

Secret base64 decoding

100%

100%

HMAC-SHA256 algorithm

100%

100%

Multiple signatures

100%

100%

Timestamp replay window

100%

100%

Missing headers check

100%

100%

Raw body preservation

100%

100%

Invalid signature test

100%

100%

Expired timestamp test

100%

100%

Valid payload test

100%

100%

Repository
hookdeck/webhook-skills
Evaluated
Agent
Claude Code
Model
Claude Sonnet 4.6

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.