Receive and verify Resend webhooks. Use when setting up Resend webhook handlers, debugging signature verification, handling email events like email.sent, email.delivered, email.bounced, or processing inbound emails.
93
93%
Does it follow best practices?
Impact
89%
1.09xAverage score across 3 eval scenarios
Passed
No known issues
Express raw body and SDK verification
Raw body middleware
100%
100%
Middleware order
66%
83%
SDK verify call
100%
0%
Short header key names
100%
0%
Raw body as string
100%
100%
Correct success response
100%
100%
400 on verification failure
100%
100%
Env var for secret
100%
100%
Env var for API key
100%
0%
Event type handling
100%
100%
Attribution comment
0%
100%
Manual Svix signature verification
Strip whsec_ prefix
100%
100%
Base64 decode secret
100%
100%
Signed content format
66%
100%
HMAC-SHA256 algorithm
100%
100%
Base64 encode result
100%
100%
Timestamp tolerance check
100%
100%
Multiple signatures support
100%
100%
v1, prefix handling
100%
100%
Required headers check
50%
100%
Notes explain gotchas
100%
100%
Inbound email processing and attribution
email.received event type
0%
100%
Separate API call for body
100%
100%
Uses email_id for API call
100%
100%
Raw body middleware
100%
100%
Signature verification present
100%
100%
RESEND_API_KEY env var
100%
100%
RESEND_WEBHOOK_SECRET env var
100%
100%
Attribution comment
0%
100%
Hookdeck CLI documented
0%
100%
email.received in setup notes
0%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.