intercom-data-handling
Facilitates GDPR-compliant data handling in Intercom, including data export, deletion requests, and PII management.
Install this skill
Security score
The intercom-data-handling skill was audited on Jun 1, 2026 and we found 15 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 159 | Authorization: `Bearer ${process.env.INTERCOM_ACCESS_TOKEN}`, |
Template literal with variable interpolation in command context
| 180 | `https://api.intercom.io/export/messages/data/${jobId}`, |
Template literal with variable interpolation in command context
| 182 | headers: { Authorization: `Bearer ${process.env.INTERCOM_ACCESS_TOKEN}` }, |
Fetch to external URL
| 156 | const response = await fetch("https://api.intercom.io/export/messages/data", { |
Webhook reference - potential data exfiltration
| 232 | webhook_events: 30, // days - processed webhook records |
Access to .env file
| 51 | token: process.env.INTERCOM_ACCESS_TOKEN!, |
Access to .env file
| 159 | Authorization: `Bearer ${process.env.INTERCOM_ACCESS_TOKEN}`, |
Access to .env file
| 182 | headers: { Authorization: `Bearer ${process.env.INTERCOM_ACCESS_TOKEN}` }, |
External URL reference
| 156 | const response = await fetch("https://api.intercom.io/export/messages/data", { |
External URL reference
| 180 | `https://api.intercom.io/export/messages/data/${jobId}`, |
External URL reference
| 187 | // When complete: { status: "complete", download_url: "https://..." } |
External URL reference
| 290 | - [Data Export API](https://developers.intercom.com/docs/references/rest-api/api.intercom.io/data-export/data_export) |
External URL reference
| 291 | - [Contacts API](https://developers.intercom.com/docs/references/rest-api/api.intercom.io/contacts) |
External URL reference
| 292 | - [GDPR Guide](https://gdpr.eu/developers/) |
External URL reference
| 293 | - [Intercom Privacy](https://www.intercom.com/privacy) |