What are the recommended access scopes?

The skill provides a mapping of recommended scopes for Development (read-only), Staging (limited write), and Production (minimal required permissions).

Does it support webhook verification?

Yes, it includes ready-to-use TypeScript examples for implementing SHA-256 HMAC signature verification to ensure incoming webhooks are legitimately from Retell AI.

How does this skill help with Retell AI API keys?

It provides standardized patterns for storing keys in environment variables, prevents accidental Git commits, and offers a step-by-step workflow for rotating keys safely.

Can I use this for production security audits?

Yes, it includes a security checklist and audit logging patterns designed to help your Retell AI implementation meet production security standards.

Retell AI Security Basics

Name: Retell AI Security Basics
Author: jeremylongshore

byjeremylongshore

•

983

Security & Testing

Implements industry-standard security practices for Retell AI API keys, access controls, and webhook verification.

About

This skill enhances Claude Code with specialized knowledge for securing Retell AI implementations. It provides automated guidance for environment variable configuration, secret rotation procedures, and least privilege access patterns. Developers can use it to audit existing setups, implement cryptographically secure webhook signature verification, and maintain robust audit logs for compliance, ensuring that voice AI integrations remain secure from development through production deployment.

Key Features

Automated workflows for zero-downtime secret rotation
Environment-specific access control patterns (Least Privilege)
Cryptographic webhook signature verification implementation
Secure API key and secret management using environment variables
983 GitHub stars
Standardized audit logging templates for security compliance

Use Cases

Implementing secure webhook handlers for real-time voice interaction events
Auditing codebases for exposed secrets and excessive API permissions
Initial setup and hardening of a Retell AI voice application environment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills retellai-security-basics

For use in Claude.ai and ChatGPT

Download Skill

GitHub