clerk-data-handling
Facilitates user data management and GDPR compliance using Clerk, enabling data export and user deletion features.
Install this skill
or
78/100
Security score
The clerk-data-handling skill was audited on May 12, 2026 and we found 10 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 206
Template literal with variable interpolation in command context
SourceSKILL.md
| 206 | console.log(`[COMPLIANCE] ${evt.type} for user ${auditEntry.userId}`) |
medium line 243
Template literal with variable interpolation in command context
SourceSKILL.md
| 243 | console.log(`Orphaned user: ${dbUser.clerkId} — removing from DB`) |
low line 167
Fetch to external URL
SourceSKILL.md
| 167 | await fetch('/api/privacy/consent', { |
medium line 191
Webhook reference - potential data exfiltration
SourceSKILL.md
| 191 | ### Step 5: Audit Logging via Webhooks |
low line 193
Webhook reference - potential data exfiltration
SourceSKILL.md
| 193 | // app/api/webhooks/clerk/route.ts (audit section) |
low line 194
Webhook reference - potential data exfiltration
SourceSKILL.md
| 194 | async function logAuditEvent(evt: WebhookEvent) { |
low line 233
Access to .env file
SourceSKILL.md
| 233 | const clerk = createClerkClient({ secretKey: process.env.CLERK_SECRET_KEY! }) |
low line 252
External URL reference
SourceSKILL.md
| 252 | - [Clerk User API](https://clerk.com/docs/references/backend/user/get-user) |
low line 253
External URL reference
SourceSKILL.md
| 253 | - [Clerk Metadata](https://clerk.com/docs/users/metadata) |
low line 254
External URL reference
SourceSKILL.md
| 254 | - [GDPR Compliance Guide](https://gdpr.eu/checklist/) |
Scanned on May 12, 2026
View Security DashboardGitHub Stars 1.5K
Rate this skill
Categorydata analytics
UpdatedMay 13, 2026
claudeclaude-codecodexfrontenddesignreactapidatabasebackenddata-analystproduct-managergrowth-marketercustomer-success-managercompliance-officerdata analyticsproductmarketingsaleslegal
jeremylongshore/claude-code-plugins-plus-skills