Skip to main content

apollo-webhooks-events

Facilitates real-time event handling for Apollo.io webhooks, enabling seamless integration and processing of event notifications.

Install this skill

or
0/100

Security score

The apollo-webhooks-events skill was audited on Feb 21, 2026 and we found 70 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 287

Template literal with variable interpolation in command context

SourceSKILL.md
287console.log(`
medium line 300

Template literal with variable interpolation in command context

SourceSKILL.md
300url: `${process.env.APP_URL}/webhooks/apollo`,
medium line 2

Webhook reference - potential data exfiltration

SourceSKILL.md
2name: apollo-webhooks-events
medium line 4

Webhook reference - potential data exfiltration

SourceSKILL.md
4Implement Apollo.io webhook handling.
medium line 5

Webhook reference - potential data exfiltration

SourceSKILL.md
5Use when receiving Apollo webhooks, processing event notifications,
medium line 7

Webhook reference - potential data exfiltration

SourceSKILL.md
7Trigger with phrases like "apollo webhooks", "apollo events",
medium line 8

Webhook reference - potential data exfiltration

SourceSKILL.md
8"apollo notifications", "apollo webhook handler", "apollo triggers".
medium line 15

Webhook reference - potential data exfiltration

SourceSKILL.md
15# Apollo Webhooks Events
medium line 18

Webhook reference - potential data exfiltration

SourceSKILL.md
18Implement webhook handlers for Apollo.io to receive real-time notifications about contact updates, sequence events, and engagement activities.
medium line 20

Webhook reference - potential data exfiltration

SourceSKILL.md
20## Apollo Webhook Events
medium line 34

Webhook reference - potential data exfiltration

SourceSKILL.md
34## Webhook Handler Implementation
low line 38

Webhook reference - potential data exfiltration

SourceSKILL.md
38// src/routes/webhooks/apollo.ts
low line 45

Webhook reference - potential data exfiltration

SourceSKILL.md
45// Webhook payload schemas
low line 86

Webhook reference - potential data exfiltration

SourceSKILL.md
86// Verify webhook signature
low line 99

Webhook reference - potential data exfiltration

SourceSKILL.md
99function verifyApolloWebhook(req: any, res: any, next: any) {
low line 101

Webhook reference - potential data exfiltration

SourceSKILL.md
101const webhookSecret = process.env.APOLLO_WEBHOOK_SECRET;
low line 103

Webhook reference - potential data exfiltration

SourceSKILL.md
103if (!webhookSecret) {
low line 104

Webhook reference - potential data exfiltration

SourceSKILL.md
104console.error('APOLLO_WEBHOOK_SECRET not configured');
low line 105

Webhook reference - potential data exfiltration

SourceSKILL.md
105return res.status(500).json({ error: 'Webhook secret not configured' });
low line 113

Webhook reference - potential data exfiltration

SourceSKILL.md
113if (!verifySignature(rawBody, signature, webhookSecret)) {
low line 120

Webhook reference - potential data exfiltration

SourceSKILL.md
120// Main webhook endpoint
low line 121

Webhook reference - potential data exfiltration

SourceSKILL.md
121router.post('/apollo', verifyApolloWebhook, async (req, res) => {
low line 138

Webhook reference - potential data exfiltration

SourceSKILL.md
138console.error('Webhook processing error:', error);
low line 148

Webhook reference - potential data exfiltration

SourceSKILL.md
148// src/services/webhooks/handlers.ts
medium line 269

Webhook reference - potential data exfiltration

SourceSKILL.md
269## Webhook Registration
low line 272

Webhook reference - potential data exfiltration

SourceSKILL.md
272// scripts/register-webhooks.ts
low line 275

Webhook reference - potential data exfiltration

SourceSKILL.md
275interface WebhookConfig {
low line 281

Webhook reference - potential data exfiltration

SourceSKILL.md
281async function registerWebhook(config: WebhookConfig) {
low line 282

Webhook reference - potential data exfiltration

SourceSKILL.md
282// Note: Apollo webhook registration is typically done through the UI
low line 284

Webhook reference - potential data exfiltration

SourceSKILL.md
284console.log('Webhook registration:', config);
low line 288

Webhook reference - potential data exfiltration

SourceSKILL.md
288To register webhooks in Apollo:
low line 290

Webhook reference - potential data exfiltration

SourceSKILL.md
2901. Go to Apollo Settings > Integrations > Webhooks
low line 291

Webhook reference - potential data exfiltration

SourceSKILL.md
2912. Click "Add Webhook"
low line 294

Webhook reference - potential data exfiltration

SourceSKILL.md
2945. Copy the webhook secret and add to your environment:
low line 295

Webhook reference - potential data exfiltration

SourceSKILL.md
295APOLLO_WEBHOOK_SECRET=<secret>
low line 299

Webhook reference - potential data exfiltration

SourceSKILL.md
299const webhookConfig: WebhookConfig = {
low line 300

Webhook reference - potential data exfiltration

SourceSKILL.md
300url: `${process.env.APP_URL}/webhooks/apollo`,
low line 312

Webhook reference - potential data exfiltration

SourceSKILL.md
312secret: process.env.APOLLO_WEBHOOK_SECRET!,
low line 315

Webhook reference - potential data exfiltration

SourceSKILL.md
315registerWebhook(webhookConfig);
medium line 318

Webhook reference - potential data exfiltration

SourceSKILL.md
318## Testing Webhooks
low line 321

Webhook reference - potential data exfiltration

SourceSKILL.md
321// tests/webhooks/apollo.test.ts
low line 334

Webhook reference - potential data exfiltration

SourceSKILL.md
334describe('Apollo Webhooks', () => {
low line 335

Webhook reference - potential data exfiltration

SourceSKILL.md
335const secret = 'test-webhook-secret';
low line 338

Webhook reference - potential data exfiltration

SourceSKILL.md
338process.env.APOLLO_WEBHOOK_SECRET = secret;
low line 343

Webhook reference - potential data exfiltration

SourceSKILL.md
343.post('/webhooks/apollo')
low line 351

Webhook reference - potential data exfiltration

SourceSKILL.md
351.post('/webhooks/apollo')
low line 374

Webhook reference - potential data exfiltration

SourceSKILL.md
374.post('/webhooks/apollo')
low line 396

Webhook reference - potential data exfiltration

SourceSKILL.md
396.post('/webhooks/apollo')
low line 414

Webhook reference - potential data exfiltration

SourceSKILL.md
414# Use the ngrok URL for webhook registration
low line 415

Webhook reference - potential data exfiltration

SourceSKILL.md
415# Example: https://abc123.ngrok.io/webhooks/apollo
medium line 419

Webhook reference - potential data exfiltration

SourceSKILL.md
419- Webhook endpoint with signature verification
medium line 422

Webhook reference - potential data exfiltration

SourceSKILL.md
422- Webhook registration instructions
medium line 423

Webhook reference - potential data exfiltration

SourceSKILL.md
423- Test suite for webhook validation
medium line 428

Webhook reference - potential data exfiltration

SourceSKILL.md
428| Invalid signature | Check webhook secret |
medium line 434

Webhook reference - potential data exfiltration

SourceSKILL.md
434- [Apollo Webhooks Documentation](https://knowledge.apollo.io/hc/en-us/articles/4415154183053)
medium line 435

Webhook reference - potential data exfiltration

SourceSKILL.md
435- [Webhook Security Best Practices](https://hookdeck.com/webhooks/guides/webhook-security-best-practices)
high line 405

Ngrok tunnel reference

SourceSKILL.md
405## Local Testing with ngrok
medium line 411

Ngrok tunnel reference

SourceSKILL.md
411# In another terminal, start ngrok
medium line 412

Ngrok tunnel reference

SourceSKILL.md
412ngrok http 3000
medium line 414

Ngrok tunnel reference

SourceSKILL.md
414# Use the ngrok URL for webhook registration
medium line 415

Ngrok tunnel reference

SourceSKILL.md
415# Example: https://abc123.ngrok.io/webhooks/apollo
high line 436

Ngrok tunnel reference

SourceSKILL.md
436- [ngrok for Local Testing](https://ngrok.com/)
low line 101

Access to .env file

SourceSKILL.md
101const webhookSecret = process.env.APOLLO_WEBHOOK_SECRET;
low line 300

Access to .env file

SourceSKILL.md
300url: `${process.env.APP_URL}/webhooks/apollo`,
low line 312

Access to .env file

SourceSKILL.md
312secret: process.env.APOLLO_WEBHOOK_SECRET!,
low line 338

Access to .env file

SourceSKILL.md
338process.env.APOLLO_WEBHOOK_SECRET = secret;
low line 415

External URL reference

SourceSKILL.md
415# Example: https://abc123.ngrok.io/webhooks/apollo
low line 434

External URL reference

SourceSKILL.md
434- [Apollo Webhooks Documentation](https://knowledge.apollo.io/hc/en-us/articles/4415154183053)
low line 435

External URL reference

SourceSKILL.md
435- [Webhook Security Best Practices](https://hookdeck.com/webhooks/guides/webhook-security-best-practices)
low line 436

External URL reference

SourceSKILL.md
436- [ngrok for Local Testing](https://ngrok.com/)
Scanned on Feb 21, 2026
View Security Dashboard
Installation guide →