Receive and verify Deepgram webhooks (callbacks). Use when setting up Deepgram webhook handlers, processing transcription callbacks, or handling asynchronous transcription results.
88
81%
Does it follow best practices?
Impact
100%
1.63xAverage score across 3 eval scenarios
Passed
No known issues
Webhook handler with dg-token authentication
dg-token header check
0%
100%
Token compared to KEY_ID
0%
100%
Raw body middleware
0%
100%
JSON.parse on body buffer
0%
100%
200-range success response
100%
100%
Reject missing token
25%
100%
Reject invalid token
25%
100%
Transcript path extraction
100%
100%
request_id in output
100%
100%
Env var documentation
0%
100%
HTTPS recommendation
0%
100%
Callback request setup and payload parsing
callback query parameter
100%
100%
Correct API endpoint
100%
100%
Authorization Token header
100%
100%
Content-Type audio/wav
100%
100%
Prints request_id
100%
100%
Payload fields documented
100%
100%
Correct transcript path
100%
100%
DEEPGRAM_API_KEY env var
100%
100%
Port restriction awareness
0%
100%
Retry behavior documented
0%
100%
No-HMAC security model and idempotency
dg-token header read
10%
100%
Token vs DEEPGRAM_API_KEY_ID
0%
100%
403 on auth failure
100%
100%
200 on success
100%
100%
No HMAC in code
100%
100%
HMAC absence documented
100%
100%
Idempotency via request_id
100%
100%
Processed IDs persisted
100%
100%
Transcript path extraction
100%
100%
HTTPS in security doc
50%
100%
Additional security measures
100%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.