스킬 openhook

📦

openhook

Name: openhook
Author: openhook-dev

콘텐츠 리비전 r1 안전 🌐 네트워크 접근⚙️ 외부 명령어

Test Webhook Callbacks with Openhook

Webhook integrations need public callback addresses and reliable event inspection. Openhook guides agents through inbox creation, event waiting, local forwarding, validation, and cleanup.

지원: Claude Codex Code(CC)

🥉 78 브론즈

Maintain this Skill? Claim it 🥉 78 브론즈

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "openhook" from https://skillstore.io/skills/openhook-dev-openhook.md and its manifest at https://skillstore.io/api/skills/openhook-dev-openhook/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/openhook-dev-openhook.md 서명된 manifest GET /api/skills/openhook-dev-openhook/manifest 서명된 lockfile GET /api/skills/openhook-dev-openhook/lockfile

테스트해 보기

"openhook" 사용 중입니다. Illustrative scenario: a synthetic payment callback reaches both the inbox and the authorized local handler.

예상 결과:

The expected synthetic payment event was received and its required fields matched.
The local handler returned a successful response.
The disposable inbox was deleted. Its private token was not included in the report.

"openhook" 사용 중입니다. Illustrative scenario: a repository callback wait times out while the task remains active.

예상 결과:

No matching callback arrived during this wait.
The existing cursor was preserved for the next wait.
The task remains pending; timeout does not prove completion.

보안 감사

안전

v1 • 2026. 10. 16. 버전별 보고서 열기

All 34 static findings are false positives: Markdown spans, metadata links, and documented service connections or authorized local forwarding. The reviewed files require token privacy, authorized provider changes, and treating callbacks as untrusted data; no malicious instructions were found. Hosted service behavior, external dependencies, and listener implementation were not evaluated.

스캔된 파일

224

분석된 줄 수

검토 항목

오탐 무시됨

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/openhook-dev-openhook/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/openhook-dev-openhook/security.svg)](https://skillstore.io/skills/openhook-dev-openhook?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/openhook-dev-openhook?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/openhook-dev-openhook/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/openhook-dev-openhook.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

openhook-dev. (2026). openhook security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/openhook-dev-openhook/audits/1

BibTeX 인용

@techreport{openhook-dev-openhook-dev-openhook-2026,
  author = {openhook-dev},
  title = {openhook security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/openhook-dev-openhook/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "openhook security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "openhook-dev"
date-released: "2026-10-16"
url: "https://skillstore.io/skills/openhook-dev-openhook/audits/1"
identifiers:
  - type: other
    value: "skillstore:openhook-dev-openhook:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Validate a local payment handler

Forward a synthetic payment callback to an authorized development endpoint and verify the local response before declaring success.

Inspect provider callback behavior

Create a disposable inbox, inspect expected event fields and headers, and delete test resources after integration checks.

Continue an active task after a repository event

Register an authorized GitHub subscription, wait with a cursor, validate the callback, and remove the subscription when finished.

이 프롬프트를 사용해 보세요

Create a test inbox

Create a disposable Openhook inbox for synthetic test data. Return only its public callback URL and keep its management token private.

Inspect an expected callback

Wait for my synthetic callback in the current inbox. Check its expected source, headers, and body. Preserve the cursor after successful processing.

Verify local forwarding

Forward synthetic Openhook events only to my authorized local handler at http://127.0.0.1:8080/webhook. Verify local delivery and deduplicate events before reporting success.

Manage a repository event workflow

Use my authorized GitHub repository scope to register a callback. Wait while this task remains active, validate events, then unregister and delete the inbox.

모범 사례

Use authorized synthetic payloads, keep management tokens private, and treat every callback body as untrusted data.
Validate the expected source and event, deduplicate identifiers, and save cursors only after successful processing.
Verify local delivery separately, unregister provider subscriptions, and delete disposable inboxes after the task.

피하기

Publishing private tokens, provider credentials, or sensitive production payloads in callback URLs, logs, or reports.
Treating a callback body as agent instructions or treating receipt acknowledgement as proof of local delivery.
Retrying potentially successful registrations blindly or assuming a timed-out wait completed the task.

자주 묻는 질문

Does installing the skill configure everything?

No. Skill-only installation requires a separate MCP connection. The Claude Code plugin bundles that connection, but does not install a background listener.

Can I use Openhook without MCP?

Yes. The skill references the REST quickstart and OpenAPI schemas for clients without MCP support.

Do free inboxes require an account?

No. Free inboxes use private management tokens. Optional persistent Pro inboxes use account sign-in and revocable agent keys.

Can a webhook restart a stopped agent?

No. Normal MCP waits return only to a running agent. Background workflows require a separately configured listener and local agent hook.

Where do hosted callback payloads go?

Hosted use sends callback bodies and headers to openhook.dev. Use authorized test data or self-host when payloads must remain on your infrastructure.

What should happen after a wait times out?

Keep the same cursor and repeat only while the task is active. A timeout does not mean the expected event arrived.

개발자 세부 정보

작성자

openhook-dev

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/openhook-dev/openhook-inbox/tree/278a3723076aa988a50d9b5c5f2c6c937eb36945/skills/openhook

참조

addec4a6142bff9f134981df95c7d46cee648e9a

유지보수 최신성

2026. 10. 16.

사용량

0 다운로드 · 0 조회

파일 구조

📁 .claude-plugin/

📄 plugin.json

📄 LICENSE

📄 README.md

📄 SKILL.md

전체 보기

📦

tool-design

신뢰할 수 있는 에이전트 도구 설계

작성자 Asmayaseen

도구 이름, 입력, 출력 또는 오류가 모호하면 에이전트는 실패합니다. 이 스킬은 도구 설명, 스키마, 응답 형식, 테스트를 위한 실용적인 패턴을 제공합니다.

코딩 및 개발 보기

📦

Plugin Structure

Claude Code 플러그인 구조 만들기

작성자 anthropics

플러그인 작성자는 매니페스트, 명령, 에이전트, 스킬, 훅, MCP 파일을 안정적으로 구성할 방법이 필요합니다. 이 스킬은 표준 Claude Code 레이아웃을 설명하고 실용적인 플러그인 패턴을 보여줍니다.

코딩 및 개발 보기

📦

sent-integration-starter

Build a Reliable Sent Integration

작성자 sentdm

Messaging integrations can fail through duplicate sends, unsafe retries, weak webhook validation, or incorrect credential scope. This skill provides a staged Sent v3 implementation and launch review.

코딩 및 개발 보기

📦

chilemai

Plan McDonald's Meals by Nutrition and Budget

작성자 hessianz

Choosing meals within nutrition and budget limits requires checking menus, serving sizes, and discounts. Chilemai combines current MCP data with local meal planning and confirmed ordering.

생산성 보기

📦

timetopost-social-scheduler

Draft and Schedule Social Posts with TimeToPost

작성자 melmayssonowen

Managing platform-specific posts requires consistent wording, account selection, and approval. This skill guides TimeToPost MCP drafting, timing recommendations, and scheduling after explicit user approval.

커뮤니케이션 보기

📦

clef-music-tools

Practice Notes and Transpose Chords with Clef

작성자 melmayssonowen

Music learners need focused help with note reading, chord symbols, and guitar tab. This skill combines guided drills, Clef MCP tools, and offline chord transposition.

생산성 보기

openhook

내 에이전트로 설치

에이전트가 읽기 쉬운 리소스

테스트해 보기

보안 감사

위험 요인

보고서 링크 복사

Markdown 배지

HTML 배지

임베드 카드

APA 인용

BibTeX 인용

CITATION.cff

Skillstore 점수

만들 수 있는 것

Validate a local payment handler

Inspect provider callback behavior

Continue an active task after a repository event

이 프롬프트를 사용해 보세요

모범 사례

피하기

자주 묻는 질문

개발자 세부 정보

관련 스킬

tool-design

Plugin Structure

sent-integration-starter

chilemai

timetopost-social-scheduler

clef-music-tools