Receive and verify ElevenLabs webhooks. Use when setting up ElevenLabs webhook handlers, debugging signature verification, or handling call transcription events.
91
88%
Does it follow best practices?
Impact
99%
1.70xAverage score across 3 eval scenarios
Advisory
Suggest reviewing before use
SDK-based webhook verification in Express.js
Correct JS package
0%
100%
SDK constructEvent used
0%
100%
Raw body middleware
100%
100%
Webhook-only API key
0%
100%
Signature header retrieval
100%
100%
401 on failure
100%
100%
Secret from env var
100%
100%
Event type handling
100%
100%
200 on success
100%
100%
Manual HMAC-SHA256 verification in Python/FastAPI
Manual HMAC implementation
100%
100%
Raw body retrieval
100%
100%
Header case handling
100%
100%
Header format parsing
50%
100%
Signed payload construction
100%
100%
HMAC-SHA256 hex digest
100%
100%
30-minute timestamp check
50%
100%
Timing-safe comparison
100%
100%
Multiple signatures support
0%
100%
Secret from env var
100%
100%
Voice event handling
0%
100%
Event routing and local development setup
Correct JS package import
0%
100%
SDK constructEvent used
0%
100%
raw body via request.text()
100%
100%
All four event types handled
0%
100%
event_timestamp for ordering
100%
100%
401 on verification failure
100%
100%
Secret from env var
100%
100%
Hookdeck CLI recommended
0%
100%
Correct tunnel command
0%
75%
No-account advantage noted
100%
100%
Webhook-only API key fallback
0%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.