What problem does it solve? Building webhook systems that reliably deliver events to subscriber endpoints is hard: messages get lost, retries cause duplicates, and unsigned payloads are spoofable. This Skill guides the design of a complete webhook delivery pipeline covering event schemas, async queues, retry policies, and signature verification. ## Core Features & Use Cases - Event & Payload Design: Defines naming conventions (resource.action), JSON payload schemas with event_id, api_version, and previous_attributes for update events. - Delivery Pipeline: Implements a publisher, queue-based delivery worker, exponential backoff with jitter (5 attempts), and dead letter queue for persistent failures. - Security & Idempotency: Generates HMAC-SHA256 signatures, subscriber-side verification with constant-time comparison, event ID deduplication, HTTPS-only URLs, and IP allowlisting. - Use Case: You are adding webhooks to a payments platform. Use this Skill to produce the event catalog, delivery worker code, subscription management API, delivery log schema, and Prometheus monitoring metrics. ## Quick Start Ask the AI to design a webhook system for your application with order and payment events, at-least-once delivery, and HMAC signature verification.
