Official agent skill

Adding Inbound Webhooks

by PostHog in PostHog/posthog

A skill your agent uses when adding a webhook endpoint for a third party that sends to PostHog, adding an inbound webhook consumer for a provider that already has an endpoint, or migrating a…

OfficialCustom licenceAuto-check passedBackend & APIs

Install Adding Inbound Webhooks

skills CLI
$ npx skills add PostHog/posthog --skill adding-inbound-webhooks -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install PostHog/posthog adding-inbound-webhooks --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/adding-inbound-webhooks .claude/skills/adding-inbound-webhooks && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
adding-inbound-webhooks
GitHub stars
40k
Token cost
~3.1k tokens
SKILL.md length
1,507 words
Files
1
Skills in repo
252
Repo updated
First seen
Licence
Custom licence

At a glance

A skill your agent uses when adding a webhook endpoint for a third party that sends to PostHog, adding an inbound webhook consumer for a provider that already has an endpoint, or migrating a…

  • Works in 6 steps: Add the module path to… → Wire the URL with build_webhook_view()… → Write posthog/ingress//README.md with… → …
  • Adding a webhook endpoint for a third party that sends to PostHog
  • SKILL.md covers Add a consumer, Add a provider, Non-goals and Verify
  • Calls semgrep and ruff

What it does

Adding Inbound Webhooks is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Use when adding a webhook endpoint for a third party that sends to PostHog, adding an inbound webhook consumer for a provider that already has an endpoint, or migrating a hand-rolled hmac verifier that the inbound-webhooks-go-through-ingress semgrep rule flags. Covers the two jobs separately: a consumer in products/<product/backend/webhookconsumers.py, and a provider incarnation under posthog/ingress/<provider/ wired with buildwebhookview(). Carries the rules that are easy to get wrong: a consumer name is a dedup…

Its SKILL.md is about 3.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering Webhooks and Cloud networking. It works with PostHog and Semgrep. The repository describes itself as: :hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error…

When your agent uses it

  • Adding a webhook endpoint for a third party that sends to PostHog
  • Adding an inbound webhook consumer for a provider that already has an endpoint
  • Migrating a hand-rolled hmac verifier that the inbound-webhooks-go-through-ingress semgrep rule flags
  • Terms: add a webhook

Example prompts

  • “/adding-inbound-webhooks”

Requirements

  • Python 3

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Add the module path to _INCARNATION_MODULES in posthog/ingress/providers.py, or the registry never sees its specs or core consumers.
  2. Wire the URL with build_webhook_view() where the App registration lives. The owner of the third-party App owns the route: a product that…
  3. Write posthog/ingress//README.md with the fixed sections, in this order: headers, signature scheme, delivery id and event type, apps and…
  4. Add the provider's signature header name to the $HEADER regex in .semgrep/rules/devex/inbound-webhooks-go-through-ingress.yaml, plus a…
  5. Do not add the endpoint to paths.exclude in the same rule. Every verifier that predated ingress is migrated, so the rule has no…
  6. Preserve the endpoint's externally observable behavior. Existing tests are the contract: move or extend them, do not drop assertions.

What it can do on your machine

Read from SKILL.md and the folder at commit 10f9ad7. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • semgrep
    • ruff

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Adding Inbound Webhooks loads about 3.1k tokens when it runs. Until then it costs about 199 tokens; SKILL.md has 1,507 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~199
When it runs · the whole SKILL.md, loaded when a task matches
~3.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,507 words (~3,059 tokens).

“Every webhook a third party sends to PostHog goes through posthog/ingress/. Read posthog/ingress/README.md for the transport contract and the package reference. This skill is the decision tree and the checklists.”

— opening of SKILL.md by PostHog, Custom licence
name
adding-inbound-webhooks

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .agents/skills/adding-inbound-webhooks of PostHog/posthog.

Open the folder on GitHubat commit 10f9ad7

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in PostHog/posthog, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Adding Inbound Webhooks next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Adding Inbound Webhooks compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Adding Inbound Webhooks this skillPostHog/posthog40k—~3.1kAutomated safety check: PassCustom licence
Smithers Integrationssmithersai/smithers429—~242Automated safety check: PassMIT
TrackingBuilderIO/agent-native7.1k—~7.8kAutomated safety check: PassNone
Agentdomainshashgraph-online/awesome-codex-plugins1.2k—~2.5kAutomated safety check: PassApache-2.0
Flexport Reference Architecturejeremylongshore/tons-of-skills-marketplace2.8k—~1.1kAutomated safety check: PassMIT
Posthog Webhooks Eventsjeremylongshore/tons-of-skills-marketplace2.8k—~2.2kAutomated safety check: PassMIT

Similar skills

  • Smithers Integrations

    smithersai/smithers

    Change Smithers provider clients, outbound actions, webhook ingress, or delivery retry behavior.

    429 GitHub stars~242 tokensUpdated today
    Backend & APIsAuto-check passed
  • Tracking

    BuilderIO/agent-native

    Server-side analytics tracking with pluggable providers. An agent skill from BuilderIO/agent-native.

    7.1k GitHub stars~7.8k tokensUpdated today
    Backend & APIsAuto-check passed
  • Agentdomains

    hashgraph-online/awesome-codex-plugins

    Get and manage a free public domain (yourname.makes.fyi or yourname.agentdomains.co) for an AI agent or app using the AgentDomains CLI.

    1.2k GitHub stars~2.5k tokensUpdated today
    Backend & APIsAuto-check passed
  • Flexport Reference Architecture

    jeremylongshore/tons-of-skills-marketplace

    Analyze and design a Flexport integration that separates REST v3 resources, MCP tools, webhook ingress, approval, and reconciliation.

    2.8k GitHub stars~1.1k tokensUpdated today
    Backend & APIsAuto-check passed
  • Posthog Webhooks Events

    jeremylongshore/tons-of-skills-marketplace

    Build and verify PostHog realtime webhook destinations and bounded private-API or HogQL event queries.

    2.8k GitHub stars~2.2k tokensUpdated today
    Backend & APIsAuto-check passed
  • Admission Control

    grafana/skills

    Official

    A skill your agent uses when the user asks to "write a validator", "add validation", "implement admission control", "write a mutating webhook", "add a mutation handler", "validate incoming…

    279 GitHub stars~1.7k tokensUpdated yesterday
    DevOps & CloudAuto-check passed

More from PostHog/posthog

All 252 skills in this repo
  • Authoring Log Alerts

    PostHog/posthog

    Official

    Author useful, low-noise log alerts on services in a PostHog project.

    40k GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Official

    Operating procedure for the conflict-autoresolver agent: sweep open PostHog/posthog PRs that conflict with master, resolve the trivial conflicts (generated artifacts deterministically, source…

    40k GitHub stars~4.2k tokensUpdated today
    Auto-check passed
  • Official

    Help users debug PostHog Error Tracking stack-trace symbolication for any supported platform — JavaScript/TypeScript web, React Native (Hermes), Android (Proguard / R8), or iOS / macOS (dSYM).

    40k GitHub stars~2.2k tokensUpdated today
    Auto-check passed
  • Exploring Apm Traces

    PostHog/posthog

    Official

    Investigates distributed application performance using PostHog APM (OpenTelemetry span) data via MCP.

    40k GitHub stars~3.5k tokensUpdated today
    Auto-check passed
  • Exploring LLM Traces

    PostHog/posthog

    Official

    Debug and inspect LLM/AI agent traces using PostHog's MCP tools.

    40k GitHub stars~4.4k tokensUpdated today
    Auto-check passed
  • Investigate Metric

    PostHog/posthog

    Official

    Diagnose why a product metric changed (dropped, spiked, or plateaued) by orchestrating breakdowns, actors, paths, lifecycle, retention, and annotations queries.

    40k GitHub stars~1.9k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Adding Inbound Webhooks

What does Adding Inbound Webhooks do?

A skill your agent uses when adding a webhook endpoint for a third party that sends to PostHog, adding an inbound webhook consumer for a provider that already has an endpoint, or migrating a…. Adding Inbound Webhooks is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Use when adding a webhook endpoint for a third party that sends to PostHog, adding an inbound webhook consumer for a provider that already has an endpoint, or migrating a hand-rolled hmac verifier that the inbound-webhooks-go-through-ingress semgrep rule flags.

When should I use Adding Inbound Webhooks?

Adding Inbound Webhooks fits situations like: adding a webhook endpoint for a third party that sends to PostHog; adding an inbound webhook consumer for a provider that already has an endpoint; migrating a hand-rolled hmac verifier that the inbound-webhooks-go-through-ingress semgrep rule flags; terms: add a webhook.

How do I install Adding Inbound Webhooks in Claude Code?

Run `npx skills add PostHog/posthog --skill adding-inbound-webhooks -a claude-code`. Or copy the skill folder (.agents/skills/adding-inbound-webhooks in PostHog/posthog) into .claude/skills/adding-inbound-webhooks in your project. Claude Code loads it when a task matches its description.

How do I install Adding Inbound Webhooks in Codex?

Run `npx skills add PostHog/posthog --skill adding-inbound-webhooks -a codex`. Or copy the skill folder (.agents/skills/adding-inbound-webhooks in PostHog/posthog) into .agents/skills/adding-inbound-webhooks in your project. Codex loads it when a task matches its description.

Can I use Adding Inbound Webhooks in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add PostHog/posthog --skill adding-inbound-webhooks -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/adding-inbound-webhooks, .gemini/skills/adding-inbound-webhooks, .github/skills/adding-inbound-webhooks and .opencode/skills/adding-inbound-webhooks in your project.

What does Adding Inbound Webhooks need to run?

Going by SKILL.md and its folder, Adding Inbound Webhooks needs the command-line tools its instructions call (semgrep and ruff). Our summary lists: Python 3.

Does Adding Inbound Webhooks access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Adding Inbound Webhooks safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Adding Inbound Webhooks use?

Adding Inbound Webhooks has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Adding Inbound Webhooks use?

About 3.1k tokens (SKILL.md is roughly 12k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Adding Inbound Webhooks?

Skills that share tags, products or a category with Adding Inbound Webhooks: Smithers Integrations (smithersai/smithers, 429 stars), Tracking (BuilderIO/agent-native, 7.1k stars), Agentdomains (hashgraph-online/awesome-codex-plugins, 1.2k stars) and Flexport Reference Architecture (jeremylongshore/tons-of-skills-marketplace, 2.8k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Adding Inbound Webhooks?

PostHog (a GitHub organization, an official publisher) maintains it in PostHog/posthog, which has 40,182 GitHub stars. The repository holds 252 skills in this directory. The repository was last updated on October 8, 2026.

Source: PostHog/posthog on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.