Implement Ideogram webhook signature validation and event handling. Use when setting up webhook endpoints, implementing signature verification, or handling Ideogram event notifications securely. Trigger with phrases like "ideogram webhook", "ideogram events", "ideogram webhook signature", "handle ideogram events", "ideogram notifications".
Install with Tessl CLI
npx tessl i github:jeremylongshore/claude-code-plugins-plus-skills --skill ideogram-webhooks-events83
Quality
77%
Does it follow best practices?
Impact
98%
1.75xAverage score across 3 eval scenarios
Optimize this skill with Tessl
npx tessl skill review --optimize ./plugins/saas-packs/ideogram-pack/skills/ideogram-webhooks-events/SKILL.mdDiscovery
89%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is a well-structured skill description with explicit trigger guidance and clear 'Use when' clauses. The main weakness is that the capability description could be more specific about concrete actions beyond 'validation and event handling'. The explicit trigger phrases and Ideogram-specific focus make it highly distinctive.
Suggestions
Add more specific concrete actions like 'verify HMAC signatures', 'parse webhook payloads', 'handle specific event types (image generation complete, etc.)' to improve specificity.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Names the domain (Ideogram webhooks) and some actions (signature validation, event handling), but lacks comprehensive concrete actions like 'verify HMAC signatures', 'parse event payloads', or 'respond to specific event types'. | 2 / 3 |
Completeness | Clearly answers both what (implement webhook signature validation and event handling) and when (setting up webhook endpoints, implementing signature verification, handling event notifications) with explicit 'Use when' and 'Trigger with' clauses. | 3 / 3 |
Trigger Term Quality | Explicitly lists natural trigger phrases users would say: 'ideogram webhook', 'ideogram events', 'ideogram webhook signature', 'handle ideogram events', 'ideogram notifications'. Good coverage of variations. | 3 / 3 |
Distinctiveness Conflict Risk | Very specific niche targeting Ideogram webhooks specifically. The 'Ideogram' qualifier throughout makes it unlikely to conflict with generic webhook skills or other API integration skills. | 3 / 3 |
Total | 11 / 12 Passed |
Implementation
64%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This skill provides solid, actionable code for implementing Ideogram webhook handling with good security practices like timing-safe comparison and replay protection. However, it could be more concise by removing prerequisite explanations Claude doesn't need, and would benefit from explicit validation checkpoints in the workflow given the security-critical nature of webhook signature verification.
Suggestions
Remove the 'Prerequisites' section or reduce it to just the webhook secret requirement - Claude understands HTTPS, cryptographic signatures, and Redis without explanation.
Add explicit validation steps in the workflow, such as 'Test signature verification with a known-good payload before deploying' and 'Verify webhook secret is correctly loaded from environment'.
Consider splitting idempotency handling into a separate reference file since it's marked as optional and adds significant content.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The skill is mostly efficient with good code examples, but includes some unnecessary elements like the 'Prerequisites' section explaining concepts Claude knows (cryptographic signatures, HTTPS) and the 'Understanding of cryptographic signatures' bullet point. | 2 / 3 |
Actionability | Provides fully executable TypeScript code for Express.js setup, signature verification, event handling, and idempotency. Code is copy-paste ready with proper imports and complete implementations. | 3 / 3 |
Workflow Clarity | Steps are listed in the 'Instructions' section but lack validation checkpoints. For a security-critical operation like webhook signature verification, there should be explicit validation steps (e.g., 'Test signature verification with known good/bad signatures before deploying'). | 2 / 3 |
Progressive Disclosure | Content is reasonably organized with clear sections, but the skill is somewhat monolithic. The idempotency section and testing examples could be referenced as separate files. References to external resources are present but the main content could be better split. | 2 / 3 |
Total | 9 / 12 Passed |
Validation
81%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 9 / 11 Passed
Validation for skill structure
| Criteria | Description | Result |
|---|---|---|
allowed_tools_field | 'allowed-tools' contains unusual tool name(s) | Warning |
frontmatter_unknown_keys | Unknown frontmatter key(s) found; consider removing or moving to metadata | Warning |
Total | 9 / 11 Passed | |
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.