postmark-inbound
Facilitates processing incoming emails with Postmark webhooks for workflows like email-to-ticket and document extraction.
Install this skill
Security score
The postmark-inbound skill was audited on Mar 8, 2026 and we found 13 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 107 | console.log(`Reply for ${type} #${id} from ${From}`); |
Template literal with variable interpolation in command context
| 109 | console.log(`New inbound email from ${From}: ${Subject}`); |
Webhook reference - potential data exfiltration
| 3 | description: Use when processing incoming emails with Postmark inbound webhooks — building reply-by-email, email-to-ticket, document extraction, or any workflow that receives and parses email. |
Webhook reference - potential data exfiltration
| 14 | Postmark's inbound processing parses incoming emails and delivers them as structured JSON to your webhook endpoint. This enables workflows like: |
Webhook reference - potential data exfiltration
| 25 | 2. **Set webhook URL** where Postmark will POST parsed email data |
Webhook reference - potential data exfiltration
| 30 | Sender → Email → Postmark → Parses email → POST JSON → Your webhook endpoint |
Webhook reference - potential data exfiltration
| 36 | 2. **Set webhook URL** — In your Postmark server settings, set the Inbound webhook URL |
Webhook reference - potential data exfiltration
| 61 | Two setup options — MX record (recommended) or email forwarding. Constraints: one inbound stream per server, one domain per stream, one webhook URL per stream. |
Webhook reference - potential data exfiltration
| 63 | See [references/inbound-setup.md](references/inbound-setup.md) for full DNS steps, forwarding caveats, retry schedule, and how to set your webhook URL. |
Webhook reference - potential data exfiltration
| 65 | ## Webhook Payload |
Webhook reference - potential data exfiltration
| 101 | app.post('/webhooks/inbound', (req, res) => { |
Webhook reference - potential data exfiltration
| 136 | | Slow webhook processing | Process async (queue the work) and respond 200 immediately | |
Webhook reference - potential data exfiltration
| 142 | - Inbound webhook payloads can be large due to attachments — set appropriate body size limits |
Install this skill with one command
/learn @activecampaign/postmark-inbound