documenso-debug-bundle

Provides a comprehensive debugging toolkit for troubleshooting Documenso integrations and gathering diagnostic information.

Install this skill

or

0/100

Security score

The documenso-debug-bundle skill was audited on Feb 21, 2026 and we found 80 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 89

Template literal with variable interpolation in command context

SourceSKILL.md

89	result.connectivity.error = `${error.statusCode}: ${error.message}`;

medium line 113

Template literal with variable interpolation in command context

SourceSKILL.md

113	console.log(`Latency: ${result.connectivity.latencyMs}ms`);

medium line 116

Template literal with variable interpolation in command context

SourceSKILL.md

116	console.log(`Error: ${result.connectivity.error}`);

medium line 132

Template literal with variable interpolation in command context

SourceSKILL.md

132	console.log(`\n=== Inspecting Document: ${documentId} ===\n`);

medium line 138

Template literal with variable interpolation in command context

SourceSKILL.md

138	console.log(` ID: ${doc.id}`);

medium line 139

Template literal with variable interpolation in command context

SourceSKILL.md

139	console.log(` Title: ${doc.title}`);

medium line 140

Template literal with variable interpolation in command context

SourceSKILL.md

140	console.log(` Status: ${doc.status}`);

medium line 141

Template literal with variable interpolation in command context

SourceSKILL.md

141	console.log(` Created: ${doc.createdAt}`);

medium line 142

Template literal with variable interpolation in command context

SourceSKILL.md

142	console.log(` Updated: ${doc.updatedAt}`);

medium line 146

Template literal with variable interpolation in command context

SourceSKILL.md

146	console.log(` - ${recipient.email}`);

medium line 147

Template literal with variable interpolation in command context

SourceSKILL.md

147	console.log(` Name: ${recipient.name}`);

medium line 148

Template literal with variable interpolation in command context

SourceSKILL.md

148	console.log(` Role: ${recipient.role}`);

medium line 149

Template literal with variable interpolation in command context

SourceSKILL.md

149	console.log(` Status: ${recipient.signingStatus}`);

medium line 150

Template literal with variable interpolation in command context

SourceSKILL.md

150	console.log(` Signing Order: ${recipient.signingOrder}`);

medium line 155

Template literal with variable interpolation in command context

SourceSKILL.md

155	console.log(` - Type: ${field.type}`);

medium line 156

Template literal with variable interpolation in command context

SourceSKILL.md

156	console.log(` Page: ${field.page}`);

medium line 157

Template literal with variable interpolation in command context

SourceSKILL.md

157	console.log(` Position: (${field.positionX}, ${field.positionY})`);

medium line 158

Template literal with variable interpolation in command context

SourceSKILL.md

158	console.log(` Size: ${field.width}x${field.height}`);

medium line 159

Template literal with variable interpolation in command context

SourceSKILL.md

159	console.log(` Recipient: ${field.recipientId}`);

medium line 164

Template literal with variable interpolation in command context

SourceSKILL.md

164	console.error(`Failed to inspect document: ${error.message}`);

medium line 165

Template literal with variable interpolation in command context

SourceSKILL.md

165	console.error(`Status: ${error.statusCode}`);

medium line 193

Template literal with variable interpolation in command context

SourceSKILL.md

193	console.log(`[${timestamp}] DEBUG:`, ...args);

medium line 197

Template literal with variable interpolation in command context

SourceSKILL.md

197	console.warn(`[${timestamp}] WARN:`, ...args);

medium line 201

Template literal with variable interpolation in command context

SourceSKILL.md

201	console.error(`[${timestamp}] ERROR:`, ...args);

medium line 224

Template literal with variable interpolation in command context

SourceSKILL.md

224	console.log(`Time: ${new Date().toISOString()}`);

medium line 225

Template literal with variable interpolation in command context

SourceSKILL.md

225	console.log(`Method: ${req.method}`);

medium line 226

Template literal with variable interpolation in command context

SourceSKILL.md

226	console.log(`Path: ${req.path}`);

medium line 239

Template literal with variable interpolation in command context

SourceSKILL.md

239	console.log(`Secret Header: ${secret ? "present" : "missing"}`);

medium line 240

Template literal with variable interpolation in command context

SourceSKILL.md

240	console.log(`Secret Valid: ${secret === expectedSecret}`);

medium line 244

Template literal with variable interpolation in command context

SourceSKILL.md

244	console.log(`Event: ${payload.event}`);

medium line 245

Template literal with variable interpolation in command context

SourceSKILL.md

245	console.log(`Document ID: ${payload.payload?.id}`);

medium line 246

Template literal with variable interpolation in command context

SourceSKILL.md

246	console.log(`Status: ${payload.payload?.status}`);

medium line 258

Template literal with variable interpolation in command context

SourceSKILL.md

258	console.log(`Webhook test server running on port ${PORT}`);

medium line 259

Template literal with variable interpolation in command context

SourceSKILL.md

259	console.log(`Endpoint: POST http://localhost:${PORT}/webhook/documenso`);

medium line 260

Template literal with variable interpolation in command context

SourceSKILL.md

260	console.log(`\nUse ngrok to expose: ngrok http ${PORT}`);

medium line 311

Template literal with variable interpolation in command context

SourceSKILL.md

311	console.log(`${status}: ${count}`);

medium line 317

Template literal with variable interpolation in command context

SourceSKILL.md

317	console.log(`- ${doc.title} (${doc.id}) - ${doc.age} old`);

medium line 320

Template literal with variable interpolation in command context

SourceSKILL.md

320	console.log(`... and ${pendingDocs.length - 10} more`);

medium line 332

Template literal with variable interpolation in command context

SourceSKILL.md

332	if (diffDays < 7) return `${diffDays} days`;

medium line 333

Template literal with variable interpolation in command context

SourceSKILL.md

333	if (diffDays < 30) return `${Math.floor(diffDays / 7)} weeks`;

medium line 334

Template literal with variable interpolation in command context

SourceSKILL.md

334	return `${Math.floor(diffDays / 30)} months`;

medium line 364

Template literal with variable interpolation in command context

SourceSKILL.md

364

```bash

medium line 356

Curl to non-GitHub URL

SourceSKILL.md

356	curl -X POST http://localhost:3000/webhook/documenso \

medium line 212

Webhook reference - potential data exfiltration

SourceSKILL.md

212	### Script 4: Webhook Tester

low line 215

Webhook reference - potential data exfiltration

SourceSKILL.md

215	// scripts/test-webhook.ts

low line 234

Webhook reference - potential data exfiltration

SourceSKILL.md

234	app.post("/webhook/documenso", (req, res) => {

low line 236

Webhook reference - potential data exfiltration

SourceSKILL.md

236	const expectedSecret = process.env.DOCUMENSO_WEBHOOK_SECRET;

low line 238

Webhook reference - potential data exfiltration

SourceSKILL.md

238	console.log(`\n=== Webhook Received ===`);

low line 251

Webhook reference - potential data exfiltration

SourceSKILL.md

251	console.error(`Failed to parse webhook:`, error);

low line 258

Webhook reference - potential data exfiltration

SourceSKILL.md

258	console.log(`Webhook test server running on port ${PORT}`);

low line 259

Webhook reference - potential data exfiltration

SourceSKILL.md

259	console.log(`Endpoint: POST http://localhost:${PORT}/webhook/documenso`);

low line 355

Webhook reference - potential data exfiltration

SourceSKILL.md

355	# Test webhook endpoint

low line 356

Webhook reference - potential data exfiltration

SourceSKILL.md

356	curl -X POST http://localhost:3000/webhook/documenso \

low line 384

Webhook reference - potential data exfiltration

SourceSKILL.md

384	# Check webhook secret

low line 385

Webhook reference - potential data exfiltration

SourceSKILL.md

385	if [ -z "$DOCUMENSO_WEBHOOK_SECRET" ]; then

low line 386

Webhook reference - potential data exfiltration

SourceSKILL.md

386	echo "DOCUMENSO_WEBHOOK_SECRET: NOT SET"

low line 388

Webhook reference - potential data exfiltration

SourceSKILL.md

388	echo "DOCUMENSO_WEBHOOK_SECRET: SET"

medium line 260

Ngrok tunnel reference

SourceSKILL.md

260	console.log(`\nUse ngrok to expose: ngrok http ${PORT}`);

low line 60

Access to .env file

SourceSKILL.md

60	apiKeyPresent: !!process.env.DOCUMENSO_API_KEY,

low line 61

Access to .env file

SourceSKILL.md

61	apiKeyPrefix: process.env.DOCUMENSO_API_KEY?.substring(0, 7) ?? "missing",

low line 62

Access to .env file

SourceSKILL.md

62	baseUrl: process.env.DOCUMENSO_BASE_URL ?? "https://app.documenso.com/api/v2/",

low line 71

Access to .env file

SourceSKILL.md

71	if (!process.env.DOCUMENSO_API_KEY) {

low line 77

Access to .env file

SourceSKILL.md

77	apiKey: process.env.DOCUMENSO_API_KEY,

low line 78

Access to .env file

SourceSKILL.md

78	serverURL: process.env.DOCUMENSO_BASE_URL,

low line 129

Access to .env file

SourceSKILL.md

129	apiKey: process.env.DOCUMENSO_API_KEY ?? "",

low line 188

Access to .env file

SourceSKILL.md

188	apiKey: process.env.DOCUMENSO_API_KEY ?? "",

low line 189

Access to .env file

SourceSKILL.md

189	serverURL: process.env.DOCUMENSO_BASE_URL,

low line 236

Access to .env file

SourceSKILL.md

236	const expectedSecret = process.env.DOCUMENSO_WEBHOOK_SECRET;

low line 256

Access to .env file

SourceSKILL.md

256	const PORT = process.env.PORT \|\| 3000;

low line 272

Access to .env file

SourceSKILL.md

272	apiKey: process.env.DOCUMENSO_API_KEY ?? "",

low line 62

External URL reference

SourceSKILL.md

62	baseUrl: process.env.DOCUMENSO_BASE_URL ?? "https://app.documenso.com/api/v2/",

low line 259

External URL reference

SourceSKILL.md

259	console.log(`Endpoint: POST http://localhost:${PORT}/webhook/documenso`);

low line 345

External URL reference

SourceSKILL.md

345	https://app.documenso.com/api/v2/documents

low line 349

External URL reference

SourceSKILL.md

349	https://app.documenso.com/api/v2/documents/{documentId}

low line 353

External URL reference

SourceSKILL.md

353	https://app.documenso.com/api/v2/templates

low line 356

External URL reference

SourceSKILL.md

356	curl -X POST http://localhost:3000/webhook/documenso \

low line 396

External URL reference

SourceSKILL.md

396	${DOCUMENSO_BASE_URL:-https://app.documenso.com/api/v2/}documents?perPage=1)

low line 418

External URL reference

SourceSKILL.md

418	- API Base URL: https://app.documenso.com/api/v2/

low line 456

External URL reference

SourceSKILL.md

456	- [Documenso Discord](https://documenso.com/discord)

low line 457

External URL reference

SourceSKILL.md

457	- [API Status](https://status.documenso.com)

Scanned on Feb 21, 2026

View Security Dashboard

Installation guide →

GitHub Stars 508

Rate this skill

Categorysales

UpdatedMay 21, 2026

openclaw api backend customer-success-manager support-agent technical-support sales support

Dicklesworthstone/pi_agent_rust