Does it handle file upload security?

Yes, the skill provides validation logic for checking PDF magic bytes and enforcing file size limits to ensure uploaded documents are both valid and safe.

Can it verify Documenso webhooks?

Yes, it includes logic for timing-safe comparison of the X-Documenso-Secret header to ensure incoming webhook events are authentic and prevent timing attacks.

Is audit logging included in this skill?

It features a standardized audit logging framework to track sensitive actions like document deletions and unauthorized access attempts for regulatory compliance.

How does this skill help with API key security?

It provides implementation patterns for environment-based key management and automated rotation strategies to prevent hardcoding and minimize exposure risks.

Documenso Security Basics

Name: Documenso Security Basics
Author: jeremylongshore

byjeremylongshore

•

1,440

•

Security & Testing

Implements industry-standard security patterns for Documenso document signing integrations including API key rotation and webhook verification.

This skill provides a comprehensive framework for securing Documenso integrations, ensuring sensitive document signing workflows remain protected. It guides developers through critical security layers such as environment-based API key management, timing-safe webhook signature verification, and granular document access controls. By implementing these patterns, developers can prevent common vulnerabilities like API key exposure, webhook spoofing, and unauthorized document access while maintaining a robust audit trail for compliance and safety.

Key Features

01Secure environment-based API key management and rotation strategies

02Automated audit logging for sensitive document operations

03Granular document access control and signing URL protection

041,440 GitHub stars

05Timing-safe webhook signature verification to prevent spoofing

06Schema-based input validation and PDF file upload security

Use Cases

01Implementing secure webhook listeners for document status updates

02Hardening production-ready Documenso signing workflows

03Building audit-compliant document management systems

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills documenso-security-basics

For use in Claude.ai and ChatGPT

Download Skill

Key Features

01Secure environment-based API key management and rotation strategies

02Automated audit logging for sensitive document operations

03Granular document access control and signing URL protection

041,440 GitHub stars

05Timing-safe webhook signature verification to prevent spoofing

06Schema-based input validation and PDF file upload security

Use Cases

01Implementing secure webhook listeners for document status updates

02Hardening production-ready Documenso signing workflows

03Building audit-compliant document management systems

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills documenso-security-basics

For use in Claude.ai and ChatGPT

Download Skill