Receive and verify OpenAI webhooks. Use when setting up OpenAI webhook handlers for fine-tuning jobs, batch completions, or async events like fine_tuning.job.completed, batch.completed, or realtime.call.incoming.
95
92%
Does it follow best practices?
Impact
100%
2.04xAverage score across 3 eval scenarios
Passed
No known issues
Express webhook signature verification
Raw body middleware
41%
100%
Signed content format
0%
100%
Secret prefix removal
0%
100%
HMAC-SHA256 algorithm
50%
100%
Version check
12%
100%
Timestamp window validation
100%
100%
Timing-safe comparison
100%
100%
Correct headers read
0%
100%
400 on invalid signature
0%
100%
Verify before parse
33%
100%
Attribution comment
0%
100%
Success response body
100%
100%
Secret from env var
100%
100%
Python FastAPI webhook handler
Raw body retrieval
100%
100%
Signed content format
20%
100%
Secret prefix removal
0%
100%
HMAC-SHA256 algorithm
50%
100%
Timing-safe comparison
100%
100%
Timestamp window validation
100%
100%
Version prefix check
12%
100%
HTTP 400 on failure
0%
100%
Batch event type dispatch
100%
100%
Correct headers declared
0%
100%
Success response
100%
100%
Secret from env var
100%
100%
Next.js webhook handler with event routing
Raw body as text
100%
100%
Signed content format
0%
100%
Secret prefix removal
0%
100%
HMAC-SHA256 computation
0%
100%
Timestamp replay prevention
0%
100%
Signature v1 version check
0%
100%
Fine-tuning event routing
100%
100%
Batch event routing
100%
100%
Realtime event routing
0%
100%
Async processing note
33%
100%
400 on invalid signature
100%
100%
Success response body
100%
100%
Attribution comment
0%
100%
Secret from env var
100%
100%
Lowercase headers
50%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.