Skip to main content

claw-skill-hookaido

Automates webhook handling and event-driven workflows using Hookaido, enabling seamless integrations and efficient queue management.

Install this skill

or
71/100

Security score

The claw-skill-hookaido skill was audited on May 31, 2026 and we found 7 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 31

Curl to non-GitHub URL

SourceSKILL.md
31- `curl http://127.0.0.1:2019/healthz?details=1`
medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: "Receive incoming webhooks from external services and trigger automations, integrations, and event-driven workflows. Operate Hookaido v2 inbound/outbound/internal webhook flows, queue tri
medium line 44

Webhook reference - potential data exfiltration

SourceSKILL.md
444. Test with a real webhook payload and a dequeue/ack cycle, using batch `ack`/`nack` when worker throughput matters.
low line 59

Webhook reference - potential data exfiltration

SourceSKILL.md
59/webhooks/github {
low line 72

Webhook reference - potential data exfiltration

SourceSKILL.md
72/webhooks/stripe {
low line 31

External URL reference

SourceSKILL.md
31- `curl http://127.0.0.1:2019/healthz?details=1`
low line 74

External URL reference

SourceSKILL.md
74deliver "https://billing.internal/stripe" {
Scanned on May 31, 2026
View Security Dashboard
Installation guide →