flexport-reference-architecture
Implements a reference architecture for Flexport logistics integrations, optimizing data flow and service boundaries.
Install this skill
or
73/100
Security score
The flexport-reference-architecture skill was audited on May 17, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 25
Webhook reference - potential data exfiltration
SourceSKILL.md
| 25 | Production reference architecture for Flexport logistics integrations. Three core services: Ingest (webhooks + polling), Core (business logic), and Expose (API + dashboard). |
low line 35
Webhook reference - potential data exfiltration
SourceSKILL.md
| 35 | │ Webhook │ Shipment │ REST API │ |
low line 58
Webhook reference - potential data exfiltration
SourceSKILL.md
| 58 | │ │ └── webhooks.ts # Webhook signature + routing |
low line 83
Webhook reference - potential data exfiltration
SourceSKILL.md
| 83 | Flexport API ──webhook──> Ingest ──queue──> Core ──cache──> Expose |
medium line 88
Webhook reference - potential data exfiltration
SourceSKILL.md
| 88 | 1. **Ingest**: Webhook receiver validates signatures, enqueues events |
medium line 91
Webhook reference - potential data exfiltration
SourceSKILL.md
| 91 | 4. **Scheduled jobs**: Hourly full sync catches any missed webhooks |
medium line 101
Webhook reference - potential data exfiltration
SourceSKILL.md
| 101 | | Webhook processing | Async via queue | Fast 200 response, process later | |
low line 76
Access to .env file
SourceSKILL.md
| 76 | ├── .env.example |
low line 46
External URL reference
SourceSKILL.md
| 46 | │ Flexport API v2 (https://api.flexport.com) │ |
low line 105
External URL reference
SourceSKILL.md
| 105 | - [Flexport Developer Portal](https://developers.flexport.com/) |
low line 106
External URL reference
SourceSKILL.md
| 106 | - [Flexport API Reference](https://apidocs.flexport.com/) |
Scanned on May 17, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categoryoperations
UpdatedJune 10, 2026
claude-codebackendapidatabasesupply-chain-managerproduct-managerbusiness-developmentpostgresqlredisdockeroperationsproductsales
jeremylongshore/claude-code-plugins-plus-skills