skills.rest
Sir-chawakorn
Sir-chawakornCOMMUNITY
Explore all skills by this author →
GitHub

deliver-webhooks

Implement signed webhook dispatch with retries, dead-letter queues, and SSRF protection.

9|3|Updated Jun 13, 2026
Search Tags:#security#api#reliability#event-driven#webhooks#ssrf
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill deliver-webhooks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: deliver-webhooks
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/deliver-webhooks
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill deliver-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the complexity of building a robust webhook producer, ensuring that your service can reliably and securely push events to third-party subscribers without stalling your system or leaking sensitive data.

Core Features & Use Cases

  • Secure Payload Signing: Implements HMAC-SHA256 signing with per-endpoint secrets and rotation support to ensure authenticity.
  • Reliable Delivery: Provides an at-least-once delivery mechanism with exponential backoff, jitter, and dead-letter queues.
  • Security & Observability: Includes SSRF protection, endpoint verification, and a comprehensive delivery history UI for debugging.

Quick Start

Use the deliver-webhooks skill to configure a secure event dispatch pipeline for your customer webhook integration.

Frequently Asked Questions about deliver-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement reliable webhook delivery with retry logic and dead-letter queues?▼

Reliable webhook delivery requires an at-least-once mechanism with exponential backoff, jitter, and dead-letter queues. This ensures failed event dispatches are retried without overwhelming the system, eventually moving persistent failures to a dead-letter queue for debugging.

How do I secure webhook payloads and prevent SSRF attacks when dispatching events?▼

Secure webhook payloads by implementing HMAC-SHA256 signing with per-endpoint secrets and rotation support. Prevent SSRF attacks during event dispatch by applying strict SSRF-protected target validation before sending requests to subscriber endpoints.

What is the best way to handle unordered event delivery in an event-driven architecture?▼

Unordered event delivery is managed using monotonic sequence tracking. This allows consumers to identify out-of-order events, enabling consumer-side idempotency and ensuring consistent state processing even when webhook delivery attempts are delayed or retried.

Does this webhook producer approach support per-endpoint secret rotation without dropping events?▼

Yes, per-endpoint secret rotation is fully supported. The producer manages secret rotation seamlessly alongside HMAC-SHA256 payload signing, ensuring event authenticity is maintained during dispatch without interrupting the at-least-once delivery pipeline.

How do I debug failed webhook deliveries and track event dispatch attempts?▼

Debug failed webhook deliveries using detailed observability of delivery attempts and a comprehensive delivery history UI. This provides the necessary tracing to inspect signed event dispatch failures, retry behavior, and dead-letter queue entries.

Related Skills

Explore More Software Engineering Skills→
Pieverse-EngPieverse-Eng

aster

Generate signed EIP-712 requests for Aster Futures API endpoints.

Official
Advanced
shafibabarshafibabar
1

go-amqp-consumer

Implement RabbitMQ consumers in Go with manual acknowledgements and dead-letter-exchange retries.

Community
Advanced
nirholasnirholas
71

webhooks

Manage webhook endpoints with HMAC-SHA256 signature verification.

Community
Intermediate
masermediagroup-stackmasermediagroup-stack
1

using-message-queues

Coordinate asynchronous microservice communication using message queues and brokers.

Community
Advanced