github-webhooks

Receive and verify GitHub webhooks. Use when setting up GitHub webhook handlers, debugging signature verification, or handling repository events like push, pull_request, issues, or release.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable skill body with executable verification code and good reference navigation. The main weaknesses are light verbosity from dual-language redundancy and a long related-skills list, plus a couple of unresolved example references.

Suggestions

Trim or collapse the Node and Python verification blocks (e.g. tabbed or one canonical example) and shorten the 10-item Related Skills list to reduce token weight.

Either add the referenced examples/express, nextjs, and fastapi directories to the bundle or relabel those links as external so navigation expectations match the actual bundle structure.

Add a short explicit handler workflow (verify → parse → respond 401 on failure / 200 on success) inline rather than only deferring it to the webhook-handler-patterns skill.

Dimension	Reasoning	Score
Conciseness	The body is lean with no over-explanation of basics, but the dual Node/Python code blocks add redundancy and the 10-entry promotional "Related Skills" list could be trimmed, keeping it just below 5.	4 / 5
Actionability	Fully executable, copy-paste-ready verify functions in both Node and Python plus concrete commands, env var, and header/event tables cover the common cases.	5 / 5
Workflow Clarity	The single-purpose verification action is unambiguous and the code embodies a validate→reject checkpoint, but the full handler sequence and explicit error-recovery/response flow are deferred to another skill rather than sequenced here.	4 / 5
Progressive Disclosure	The body is a clear overview with one-level-deep local references (overview.md, setup.md, verification.md) that resolve in the bundle, but the examples/ links do not exist in the bundle and external GitHub references are mixed in, leaving minor organization gaps.	4 / 5
	Total	17 / 20 Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that concisely states both capability and explicit trigger conditions with natural, distinguishable terms. Minor keyword synonym coverage is the only small gap.

Dimension	Reasoning	Score
Specificity	"Receive and verify GitHub webhooks" plus "handling repository events like push, pull_request, issues, or release" names the domain and several concrete actions with only minor coverage gaps, fitting just above the 3 anchor.	4 / 5
Completeness	It explicitly states what ("Receive and verify GitHub webhooks") and when ("Use when setting up GitHub webhook handlers, debugging signature verification, or handling repository events...") with concrete trigger phrases.	5 / 5
Trigger Term Quality	Natural terms like "GitHub webhooks", "webhook handlers", "signature verification", and the event names are present and match what users say, but a few synonyms (e.g. "webhook events", "payloads") are missing so it stops short of 5.	4 / 5
Distinctiveness Conflict Risk	"GitHub webhooks" is a clear niche with distinct, provider-specific triggers and minimal overlap risk with other skills.	5 / 5
	Total	18 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
relative_links	Relative link issues: 3 missing	Warning

	Total	15 / 16 Passed

Repository: hookdeck/webhook-skills
Path: skills/github-webhooks/SKILL.md
Commit: daaf3db

Reviewed: 2 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.