Skip to content
Diagnosis · Security

ascend-webhooks

Receive and verify Ascend webhooks.

Testing what is locked and what isn’t

Works with
ClaudeChatGPTGeminiClaude CodeCodexCursorCopilotGemini CLI
Setup
One command
Best in a coding tool, where its scripts can run.
Contains
Instructions + 7 scripts
JavaScript, Python and TypeScript.
Maintained
Last change 2 Oct 2026
On the repository’s main branch.

What it does

Ascend (insurance payments / premium financing) sends webhooks so your app is notified when an event happens — for example when an invoice is paid. Ascend POSTs a JSON payload over HTTPS and signs it with an HMAC-SHA256 signature you must verify before trusting the event.

When your AI uses it

Use when setting up Ascend webhook handlers, debugging Ascend signature verification (X-Ascend-Signature, HMAC-SHA256), or handling…

You don’t need to name it. Ask for the job in your own words — your AI loads the skill when the request matches.

What it can touch

  • Includes 7 scripts

    Your AI can run these when the skill is used — on your computer in a coding tool (which asks first unless you have told it not to), or in the AI’s own sandbox in Claude and ChatGPT.

    How we know

    Found in the skill’s folder: examples/express/src/index.js, examples/express/test/webhook.test.js, examples/fastapi/main.py, examples/fastapi/test_webhook.py….

  • Uses terminal commands

    It shows your AI commands to run. In a coding agent that means your terminal; in a chat app it usually can’t.

    How we know

    The SKILL.md contains shell code blocks.

  • No known risk pattern found

    Launch7’s automated check read all 20 text files in this skill and matched none of its risk patterns. This is not a guarantee: a check like this can miss new or disguised tricks, and the author can change the files after the check.

    How we know

    Read 2026-10-05, commit c63f9be by pipeline/trust/analyze.py — 40+ patterns for hidden text, prompt injection, downloads that run, credential access and more. It reads; it never runs the skill.

  • Recently maintained

    Its repository has had changes recently.

    How we know

    Last push to hookdeck/webhook-skills: 2026-10-02 (3 days before the scan).

Read automatically from the skill’s own files on GitHub on 5 Oct 2026. Launch7 does not run or manually review skills: this lists what the check saw, and nothing here means “safe”. How we check

Add it to your AI

Partly. Upload it in Claude’s settings — the instructions work; the scripts need the full folder.

  1. Built in your browser from the SKILL.md on GitHub — nothing passes through Launch7.

  2. In Claude, open Customize → Skills, press +, then Create skill → Upload a skill, and choose the .zip.

  3. Make sure code execution is switched on (Settings → Capabilities). Skills need it.

  4. Start a new chat and ask for the job in your own words — Claude picks the skill up when it fits.

This skill ships 7 scripts beside its instructions. The download here is the SKILL.md alone — enough for the instructions, not for the parts that run code. Use the command route, or take the full folder from the repository.

How Claude does this: support.claude.com · checked 28 Sep 2026 · “Supported” means documented by the vendor; Launch7 has not run it end to end

More from hookdeck

All from this publisher →
  • adyen-webhooks

    Receive and verify Adyen webhooks (standard notifications).

    From HookdeckIncludes 7 scripts
  • aiprise-webhooks

    Receive and verify AiPrise webhooks (callbacks).

    From HookdeckReview before installing
  • aircall-webhooks

    Receive and verify Aircall webhooks.

    From HookdeckIncludes 7 scripts
  • airtable-webhooks

    Receive and verify Airtable webhooks.

    From HookdeckIncludes 7 scripts
  • airwallex-webhooks

    Receive and verify Airwallex webhooks.

    From HookdeckIncludes 7 scripts