# Doncheli Webhook

> Configure and test webhooks and automation triggers for the project. Activate when user mentions "webhook", "trigger", "automation", "event hook", "notify on", "callback URL".

- **Type:** Skill
- **Install:** `agentstack add skill-doncheli-don-cheli-sdd-doncheli-webhook`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [doncheli](https://agentstack.voostack.com/s/doncheli)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [doncheli](https://github.com/doncheli)
- **Source:** https://github.com/doncheli/don-cheli-sdd/tree/main/.agent/skills/doncheli-webhook
- **Website:** https://doncheli.tv

## Install

```sh
agentstack add skill-doncheli-don-cheli-sdd-doncheli-webhook
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Don Cheli: Webhook & Automation

## Instructions

1. Accept the desired webhook configuration: event, target URL, payload format, secret
2. Detect the platform (GitHub Actions, custom server, Zapier, etc.) from context
3. Generate the webhook configuration code/YAML for the detected platform
4. Validate the target URL is reachable if possible (HTTP HEAD check)
5. Generate a test payload that matches the event schema
6. Provide a `curl` command to manually test the webhook
7. Check for security best practices:
   - HTTPS endpoint required (flag plain HTTP as a blocker)
   - Webhook secret / HMAC signature validation
   - Idempotency key handling for retries
8. Document the webhook in `.dc/webhooks.md` with: event, URL, owner, secret env var name
9. Never log or print the actual secret value — always reference the env var name

## Output Format

```
## Webhook Configuration — pr_merged → deploy

### Config (GitHub Actions)
on:
  pull_request:
    types: [closed]

### Test Command
curl -X POST https://your-app.com/hooks/deploy \
  -H "X-Hub-Signature-256: sha256=" \
  -H "Content-Type: application/json" \
  -d '{"action":"closed","merged":true,"branch":"main"}'

### Security Checklist
✅ HTTPS endpoint
✅ HMAC signature validation required
⚠️  Add idempotency key handling to prevent duplicate deploys on retry

### Registered in .dc/webhooks.md
Event: pull_request.closed + merged
Target: https://your-app.com/hooks/deploy
Secret: $WEBHOOK_SECRET_DEPLOY
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [doncheli](https://github.com/doncheli)
- **Source:** [doncheli/don-cheli-sdd](https://github.com/doncheli/don-cheli-sdd)
- **License:** Apache-2.0
- **Homepage:** https://doncheli.tv

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-doncheli-don-cheli-sdd-doncheli-webhook
- Seller: https://agentstack.voostack.com/s/doncheli
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.