hookdeck — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hookdeck (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
| What you want to do | Skill |
|---|---|
| Receive and process webhooks | event-gateway |
| Route events between third-party services | event-gateway |
| Build asynchronous APIs (IoT, SDKs, web analytics) | event-gateway |
| Test and debug webhooks on localhost | event-gateway |
| Send webhooks/events to customers | outpost |
Inbound event infrastructure. One skill covers all use cases: staged integration workflow, connections, rules, authentication, local dev, monitoring, and API.
For Event Gateway operations and analysis, prefer hookdeck gateway ...; root hookdeck connection ... remains a deprecated compatibility alias.
npx skills add hookdeck/agent-skills --skill event-gatewayOutbound event delivery to HTTP, SQS, RabbitMQ, Pub/Sub, and more.
npx skills add hookdeck/agent-skills --skill outpostFor provider-specific webhook knowledge (Stripe, Shopify, GitHub, etc.), see hookdeck/webhook-skills. The event-gateway skill references these during the scaffold stage. Non-interactive install: use -y -g on npx skills add hookdeck/webhook-skills --skill <provider>-webhooks so the Skills CLI does not prompt (details: provider-webhooks-checklist.md).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.