How does this skill verify PostHog webhook signatures?

It implements HMAC-SHA256 signature verification using a shared secret, comparing the computed signature of the payload and timestamp against the x-posthog-signature header.

Is idempotency handled for duplicate events?

Yes, it provides an optional Redis-based implementation to track processed event IDs and prevent duplicate actions from being triggered by the same webhook.

What frameworks are supported by the templates?

The skill provides optimized patterns for Node.js and Express.js, specifically focusing on handling raw request bodies which are required for cryptographic verification.

Does it protect against replay attacks?

Yes, the skill includes logic to check the x-posthog-timestamp header, rejecting any webhooks that are too old to prevent malicious request re-transmission.

PostHog Webhooks & Events

Name: PostHog Webhooks & Events
Author: Brmbobo

byBrmbobo

分析与监控

Implements secure PostHog webhook integration with signature validation and automated event handling.

关于

This skill enables developers to securely integrate PostHog webhooks into their applications by providing robust patterns for signature verification, replay protection, and idempotent event processing. It includes pre-built templates for Express.js endpoints, HMAC-based security checks, and scalable event handler architectures, ensuring reliable and secure data synchronization between PostHog and your backend services. Whether you are syncing user behavioral data or triggering real-time actions, this skill simplifies the complex security requirements of webhook management.

主要功能

Replay attack protection with timestamp verification
0 GitHub stars
Idempotent event processing with Redis integration
Secure HMAC-based signature validation
Scalable event handler patterns for multiple event types
Standardized Express.js webhook endpoint templates

使用场景

Building custom notification systems for product analytics
Syncing user behavioral data from PostHog to a local database
Triggering real-time transactional emails based on PostHog events

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add brmbobo/web2podcast posthog-webhooks-events

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于