clerk-observability
Enables comprehensive monitoring and logging for Clerk authentication, aiding in debugging and audit logging for production environments.
Install this skill
Security score
The clerk-observability skill was audited on Mar 3, 2026 and we found 23 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 136 | console.log(`[Metric] ${name}: ${value}`) |
Fetch to external URL
| 79 | fetch('https://http-intake.logs.datadoghq.com/v1/input', { |
Webhook reference - potential data exfiltration
| 188 | ### Step 4: Webhook Event Tracking |
Webhook reference - potential data exfiltration
| 190 | // app/api/webhooks/clerk/route.ts |
Webhook reference - potential data exfiltration
| 191 | import { Webhook } from 'svix' |
Webhook reference - potential data exfiltration
| 193 | import { WebhookEvent } from '@clerk/nextjs/server' |
Webhook reference - potential data exfiltration
| 195 | const webhookMetrics = { |
Webhook reference - potential data exfiltration
| 203 | webhookMetrics.received++ |
Webhook reference - potential data exfiltration
| 212 | const evt = wh.verify(body, headers) as WebhookEvent |
Webhook reference - potential data exfiltration
| 216 | webhookMetrics.byType[eventType] = (webhookMetrics.byType[eventType] || 0) + 1 |
Webhook reference - potential data exfiltration
| 221 | webhookMetrics.processed++ |
Webhook reference - potential data exfiltration
| 224 | console.log('[Webhook]', { |
Webhook reference - potential data exfiltration
| 233 | webhookMetrics.failed++ |
Webhook reference - potential data exfiltration
| 235 | console.error('[Webhook Error]', { |
Webhook reference - potential data exfiltration
| 247 | return Response.json(webhookMetrics) |
Webhook reference - potential data exfiltration
| 309 | webhooks: { status: string; lastReceived: string | null } |
Webhook reference - potential data exfiltration
| 320 | webhooks: { status: 'unknown', lastReceived: null } |
Webhook reference - potential data exfiltration
| 368 | - Webhook processing time |
Webhook reference - potential data exfiltration
| 381 | | Failed webhooks | Alert on failure rate > 1% | |
Access to .env file
| 78 | if (process.env.DD_API_KEY) { |
Access to .env file
| 83 | 'DD-API-KEY': process.env.DD_API_KEY |
External URL reference
| 79 | fetch('https://http-intake.logs.datadoghq.com/v1/input', { |
External URL reference
| 386 | - [Clerk Dashboard Analytics](https://dashboard.clerk.com) |