webhook-signature-validator

Quick Review

This skill is essentially a template with placeholder content. The description is vague ('Validate webhook signature validator operations' is circular and unclear). It lacks concrete task knowledge—no actual validation algorithms, signature verification methods, supported webhook providers (Stripe, GitHub, Shopify), HMAC implementations, or code examples. The structure is clear and well-organized with appropriate sections, but they contain generic boilerplate rather than specific guidance. Novelty is low-to-moderate: while webhook signature validation can be tricky (timing attacks, encoding issues), the skill provides no specialized logic that would save a CLI agent tokens or effort. To improve: specify supported signature schemes (HMAC-SHA256, etc.), provide validation code snippets, list common providers and their requirements, and include actual security best practices for constant-time comparison.