CtrlK
BlogDocsLog inGet started
Tessl Logo

fireflies-webhooks-events

Implement Fireflies.ai webhook receiver with HMAC signature verification and event processing. Use when setting up webhook endpoints, handling transcript-ready notifications, or building real-time meeting intelligence pipelines. Trigger with phrases like "fireflies webhook", "fireflies events", "fireflies webhook signature", "handle fireflies events", "fireflies notifications".

71

Quality

88%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Advisory

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Discovery

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is a well-crafted skill description that clearly identifies the specific service (Fireflies.ai), concrete technical actions (webhook receiver, HMAC verification, event processing), explicit use-when triggers, and natural user phrases. It follows third-person voice throughout and is concise without being vague. The only minor note is that the trigger terms are somewhat redundant variations, but they still serve the purpose of matching user queries effectively.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: 'webhook receiver', 'HMAC signature verification', 'event processing', 'setting up webhook endpoints', 'handling transcript-ready notifications', 'building real-time meeting intelligence pipelines'.

3 / 3

Completeness

Clearly answers both 'what' (implement webhook receiver with HMAC verification and event processing) and 'when' (explicit 'Use when' clause with specific scenarios, plus a 'Trigger with phrases' section listing exact keywords).

3 / 3

Trigger Term Quality

Excellent coverage of natural trigger terms including 'fireflies webhook', 'fireflies events', 'fireflies webhook signature', 'handle fireflies events', 'fireflies notifications'. These are terms users would naturally use when needing this specific integration.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive — targets a specific third-party service (Fireflies.ai) with specific technical scope (webhook receiver, HMAC signature verification). Very unlikely to conflict with other skills unless there's another Fireflies-specific skill.

3 / 3

Total

12

/

12

Passed

Implementation

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a solid, actionable skill with executable code, proper security patterns (HMAC verification with timing-safe comparison), and a clear multi-step workflow. Its main weakness is length — the downstream processing stubs and some inline detail could be extracted or trimmed to improve token efficiency. The skill correctly covers the key Fireflies-specific gotchas (owner-only constraint, raw body requirement, single event type).

Suggestions

Trim the placeholder downstream functions (storeTranscript, createTasksFromActionItems, notifyTeam) to brief comments or a single stub, as they don't teach Fireflies-specific knowledge.

Consider extracting the GraphQL transcript query and per-upload webhook into a referenced file to reduce the main skill's token footprint.

DimensionReasoningScore

Conciseness

The skill is mostly efficient but includes some unnecessary verbosity — the downstream processing stubs (storeTranscript, createTasksFromActionItems, notifyTeam) are placeholder code that adds bulk without teaching anything new. The error handling table and output section are useful but could be tighter. Some explanatory comments in code are redundant for Claude.

2 / 3

Actionability

The skill provides fully executable TypeScript code with proper HMAC verification, GraphQL queries, and curl test commands. Code is copy-paste ready with real API endpoints, correct header names (x-hub-signature), and proper patterns like raw body parsing and timing-safe comparison.

3 / 3

Workflow Clarity

The 5-step workflow is clearly sequenced from registration through testing. It includes validation via signature verification with explicit rejection handling, async acknowledgment pattern (respond 200 then process), and error handling table. The test step provides a concrete way to verify the integration works.

3 / 3

Progressive Disclosure

The content is well-structured with clear sections, but it's quite long (~180 lines of content) and could benefit from splitting the transcript processing and per-upload webhook into separate referenced files. The reference to 'fireflies-deploy-integration' in Next Steps is good but the main content is somewhat monolithic. No bundle files exist to offload detail.

2 / 3

Total

10

/

12

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation9 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

9

/

11

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.