SwarmHook - Agent Installation Guide

Provides a zero-cost webhook infrastructure for autonomous AI agents, enabling temporary webhook URLs and event polling without permanent servers.

Install this skill

or

0/100

Security score

The SwarmHook - Agent Installation Guide skill was audited on Feb 18, 2026 and we found 53 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 221

Template literal with variable interpolation in command context

SourceSKILL.md

221	console.log(`Webhook URL: ${inbox.webhook_url}`)

medium line 226

Template literal with variable interpolation in command context

SourceSKILL.md

226	`${inbox.polling_url}?wait=60&unread=true&mark_read=true`,

medium line 263

Template literal with variable interpolation in command context

SourceSKILL.md

263	`https://swarmhook.com/api/v1/inboxes/${inbox.id}/stream`,

medium line 32

Curl to non-GitHub URL

SourceSKILL.md

32	curl -X POST https://swarmhook.com/api/v1/agents/register \

medium line 59

Curl to non-GitHub URL

SourceSKILL.md

59	curl -X POST https://swarmhook.com/api/v1/inboxes \

medium line 92

Curl to non-GitHub URL

SourceSKILL.md

92	curl -X POST https://api.swarmmarket.io/api/v1/agents/me/webhooks \

medium line 113

Curl to non-GitHub URL

SourceSKILL.md

113	curl https://swarmhook.com/api/v1/inboxes/inbox_def456/events \

medium line 119

Curl to non-GitHub URL

SourceSKILL.md

119	curl "https://swarmhook.com/api/v1/inboxes/inbox_def456/events?wait=60&unread=true&mark_read=true" \

medium line 250

Curl to non-GitHub URL

SourceSKILL.md

250	curl -s "https://swarmhook.com/api/v1/inboxes/$INBOX_ID/events?wait=60&unread=true&mark_read=true" \

low line 200

Fetch to external URL

SourceSKILL.md

200	const registration = await fetch('https://swarmhook.com/api/v1/agents/register', {

low line 212

Fetch to external URL

SourceSKILL.md

212	const inbox = await fetch('https://swarmhook.com/api/v1/inboxes', {

medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md

3	Zero-cost webhook infrastructure for autonomous AI agents

medium line 5

Webhook reference - potential data exfiltration

SourceSKILL.md

5	SwarmHook provides ephemeral webhook inboxes that agents can poll, eliminating the need for permanent infrastructure.

medium line 11

Webhook reference - potential data exfiltration

SourceSKILL.md

11	SwarmHook solves a critical problem: AI agents need to receive webhooks but can't run permanent web servers.

medium line 20

Webhook reference - potential data exfiltration

SourceSKILL.md

20	- ✅ Temporary webhook URLs (24-48hr lifetime)

low line 71

Webhook reference - potential data exfiltration

SourceSKILL.md

71	"webhook_url": "https://swarmhook.com/in/inbox_def456",

medium line 80

Webhook reference - potential data exfiltration

SourceSKILL.md

80	- `webhook_url` - Give this to external services (SwarmMarket, Stripe, etc.)

medium line 86

Webhook reference - potential data exfiltration

SourceSKILL.md

86	### Step 2: Register Webhook URL

medium line 88

Webhook reference - potential data exfiltration

SourceSKILL.md

88	Give your inbox's `webhook_url` to the service you want to receive webhooks from:

low line 92

Webhook reference - potential data exfiltration

SourceSKILL.md

92	curl -X POST https://api.swarmmarket.io/api/v1/agents/me/webhooks \

low line 102

Webhook reference - potential data exfiltration

SourceSKILL.md

102	stripe webhooks create \

low line 140

Webhook reference - potential data exfiltration

SourceSKILL.md

140	"x-webhook-signature": "sha256=..."

low line 179

Webhook reference - potential data exfiltration

SourceSKILL.md

179	print(f"Webhook URL: {inbox['webhook_url']}")

low line 180

Webhook reference - potential data exfiltration

SourceSKILL.md

180	print(f"Register this URL with your webhook provider!")

low line 191

Webhook reference - potential data exfiltration

SourceSKILL.md

191	print(f"Received webhook: {event['body']}")

low line 192

Webhook reference - potential data exfiltration

SourceSKILL.md

192	# Process the webhook

low line 193

Webhook reference - potential data exfiltration

SourceSKILL.md

193	handle_webhook(event)

low line 221

Webhook reference - potential data exfiltration

SourceSKILL.md

221	console.log(`Webhook URL: ${inbox.webhook_url}`)

low line 233

Webhook reference - potential data exfiltration

SourceSKILL.md

233	console.log('Received webhook:', event.body)

low line 234

Webhook reference - potential data exfiltration

SourceSKILL.md

234	await handleWebhook(event)

low line 269

Webhook reference - potential data exfiltration

SourceSKILL.md

269	eventSource.addEventListener('webhook', (event) => {

low line 271

Webhook reference - potential data exfiltration

SourceSKILL.md

271	console.log('New webhook:', data)

low line 272

Webhook reference - potential data exfiltration

SourceSKILL.md

272	handleWebhook(data)

medium line 287

Webhook reference - potential data exfiltration

SourceSKILL.md

287	- ✅ Verify webhook signatures if the source provides them

medium line 298

Webhook reference - potential data exfiltration

SourceSKILL.md

298	- ✅ Update webhook URL with external service when switching inboxes

medium line 335

Webhook reference - potential data exfiltration

SourceSKILL.md

335	1. Verify your webhook URL is correct

medium line 336

Webhook reference - potential data exfiltration

SourceSKILL.md

336	2. Check that the external service is sending webhooks

low line 369

Webhook reference - potential data exfiltration

SourceSKILL.md

369	→ Returns: { "webhook_url": "...", "api_key": "iwh_...", ... }

low line 32

External URL reference

SourceSKILL.md

32	curl -X POST https://swarmhook.com/api/v1/agents/register \

low line 59

External URL reference

SourceSKILL.md

59	curl -X POST https://swarmhook.com/api/v1/inboxes \

low line 71

External URL reference

SourceSKILL.md

71	"webhook_url": "https://swarmhook.com/in/inbox_def456",

low line 72

External URL reference

SourceSKILL.md

72	"polling_url": "https://swarmhook.com/api/v1/inboxes/inbox_def456/events",

low line 92

External URL reference

SourceSKILL.md

92	curl -X POST https://api.swarmmarket.io/api/v1/agents/me/webhooks \

low line 95

External URL reference

SourceSKILL.md

95	"url": "https://swarmhook.com/in/inbox_def456",

low line 103

External URL reference

SourceSKILL.md

103	--url https://swarmhook.com/in/inbox_def456 \

low line 113

External URL reference

SourceSKILL.md

113	curl https://swarmhook.com/api/v1/inboxes/inbox_def456/events \

low line 119

External URL reference

SourceSKILL.md

119	curl "https://swarmhook.com/api/v1/inboxes/inbox_def456/events?wait=60&unread=true&mark_read=true" \

low line 166

External URL reference

SourceSKILL.md

166	response = requests.post('https://swarmhook.com/api/v1/agents/register', json={

low line 174

External URL reference

SourceSKILL.md

174	'https://swarmhook.com/api/v1/inboxes',

low line 200

External URL reference

SourceSKILL.md

200	const registration = await fetch('https://swarmhook.com/api/v1/agents/register', {

low line 212

External URL reference

SourceSKILL.md

212	const inbox = await fetch('https://swarmhook.com/api/v1/inboxes', {

low line 250

External URL reference

SourceSKILL.md

250	curl -s "https://swarmhook.com/api/v1/inboxes/$INBOX_ID/events?wait=60&unread=true&mark_read=true" \

low line 263

External URL reference

SourceSKILL.md

263	`https://swarmhook.com/api/v1/inboxes/${inbox.id}/stream`,

Scanned on Feb 18, 2026

View Security Dashboard

Install this skill with one command

/learn @digi604/swarmhook-agent-installation-guide

GitHub Stars 1

Rate this skill

Categorydevelopment

UpdatedMarch 29, 2026

openclaw api backend ml-ai-engineer backend-developer devops-sre development

digi604/swarmhook