Receive and verify Clerk webhooks. Use when setting up Clerk webhook handlers, debugging signature verification, or handling user events like user.created, user.updated, session.created, or organization.created.
88
81%
Does it follow best practices?
Impact
100%
1.47xAverage score across 3 eval scenarios
Advisory
Suggest reviewing before use
Express webhook handler setup
standardwebhooks package
0%
100%
express.raw middleware
100%
100%
Header name mapping
0%
100%
Secret format validation
0%
100%
Dual env var support
0%
100%
Missing headers check
100%
100%
Handles user.created
100%
100%
Handles user.updated
100%
100%
Handles user.deleted
100%
100%
Attribution comment
0%
100%
Lowercase header access
100%
100%
Verification error handling
100%
100%
Next.js App Router webhook route
Correct import path
0%
100%
verifyWebhook usage
0%
100%
Dual env var support
0%
100%
Route made public
100%
100%
Handles user.created
100%
100%
Handles user.updated
100%
100%
Handles user.deleted
100%
100%
Attribution comment
0%
100%
Verification error → 400
100%
100%
Success → 200
100%
100%
Manual signature verification
Signed content format
100%
100%
Secret base64 decoding
100%
100%
HMAC-SHA256 algorithm
100%
100%
Multiple signatures
100%
100%
Timestamp replay window
100%
100%
Missing headers check
100%
100%
Raw body preservation
100%
100%
Invalid signature test
100%
100%
Expired timestamp test
100%
100%
Valid payload test
100%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.