Skip to main content

clerk-deploy-integration

Facilitates the deployment of Clerk-authenticated applications on platforms like Vercel, Netlify, and Railway with environment configuration.

Install this skill

or
60/100

Security score

The clerk-deploy-integration skill was audited on May 12, 2026 and we found 20 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 139

Template literal with variable interpolation in command context

SourceSKILL.md
139```bash
medium line 28

Webhook reference - potential data exfiltration

SourceSKILL.md
28Deploy Clerk-authenticated applications to Vercel, Netlify, Railway, and other hosting platforms. Covers environment variable configuration, domain setup, and webhook endpoint configuration.
low line 44

Webhook reference - potential data exfiltration

SourceSKILL.md
44vercel env add CLERK_WEBHOOK_SECRET production
low line 96

Webhook reference - potential data exfiltration

SourceSKILL.md
96railway variables set CLERK_WEBHOOK_SECRET=whsec_...
low line 133

Webhook reference - potential data exfiltration

SourceSKILL.md
133- CLERK_WEBHOOK_SECRET=whsec_...
low line 159

Webhook reference - potential data exfiltration

SourceSKILL.md
159# 4. Webhook endpoint reachable
low line 160

Webhook reference - potential data exfiltration

SourceSKILL.md
160STATUS=$(curl -s -o /dev/null -w "%{http_code}" -X POST "$DOMAIN/api/webhooks/clerk")
low line 161

Webhook reference - potential data exfiltration

SourceSKILL.md
161echo "Webhook endpoint: HTTP $STATUS (400/405 expected without valid payload)"
medium line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169- Webhook endpoint accessible at production URL
medium line 175

Webhook reference - potential data exfiltration

SourceSKILL.md
175| Webhook signature fails | Wrong endpoint URL | Update URL in Clerk Dashboard > Webhooks |
medium line 198

Webhook reference - potential data exfiltration

SourceSKILL.md
198Proceed to `clerk-webhooks-events` for webhook configuration.
low line 71

Access to .env file

SourceSKILL.md
71const clerk = createClerkClient({ secretKey: process.env.CLERK_SECRET_KEY! })
low line 54

External URL reference

SourceSKILL.md
542. Set **Home URL**: `https://myapp.com`
low line 55

External URL reference

SourceSKILL.md
553. Set **Sign-in URL**: `https://myapp.com/sign-in`
low line 56

External URL reference

SourceSKILL.md
564. Set **Sign-up URL**: `https://myapp.com/sign-up`
low line 57

External URL reference

SourceSKILL.md
575. Set **After sign-in URL**: `https://myapp.com/dashboard`
low line 144

External URL reference

SourceSKILL.md
144DOMAIN="${1:-https://myapp.com}"
low line 193

External URL reference

SourceSKILL.md
193- [Deploy to Vercel](https://clerk.com/docs/deployments/deploy-to-vercel)
low line 194

External URL reference

SourceSKILL.md
194- [Deploy to Netlify](https://clerk.com/docs/deployments/deploy-to-netlify)
low line 195

External URL reference

SourceSKILL.md
195- [Clerk Domain Configuration](https://clerk.com/docs/deployments/set-up-your-domain)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →