granola-webhooks-events
Facilitates event-driven automations using Granola webhooks for real-time notifications and custom integrations.
Install this skill
Security score
The granola-webhooks-events skill was audited on May 12, 2026 and we found 32 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 128 | console.log(`Meeting received: ${title} (${datetime})`); |
Template literal with variable interpolation in command context
| 150 | console.log(`External meeting: ${title}, ${actionItems.length} action items`); |
Template literal with variable interpolation in command context
| 155 | console.log(`Internal meeting: ${title}, ${actionItems.length} action items`); |
Template literal with variable interpolation in command context
| 208 | const noteId = `${req.body.title}-${req.body.datetime}`; |
Webhook reference - potential data exfiltration
| 2 | name: granola-webhooks-events |
Webhook reference - potential data exfiltration
| 3 | description: 'Build event-driven automations with Granola''s Zapier webhook triggers. |
Webhook reference - potential data exfiltration
| 9 | Trigger: "granola webhooks", "granola events", "granola triggers", |
Webhook reference - potential data exfiltration
| 21 | - webhooks |
Webhook reference - potential data exfiltration
| 25 | # Granola Webhooks & Events |
Webhook reference - potential data exfiltration
| 28 | Granola does not expose raw webhook endpoints. All event-driven automation flows through Zapier, which provides two trigger events. This skill covers the event model, webhook payload structure, event |
Webhook reference - potential data exfiltration
| 33 | - Optional: custom webhook endpoint (Express.js, FastAPI, or serverless function) |
Webhook reference - potential data exfiltration
| 39 | Granola fires events through Zapier triggers, not direct webhooks. Two triggers are available: |
Webhook reference - potential data exfiltration
| 46 | ### Step 2 — Webhook Payload Structure |
Webhook reference - potential data exfiltration
| 96 | ### Step 4 — Build a Custom Webhook Handler |
Webhook reference - potential data exfiltration
| 103 | Action: Webhooks by Zapier — POST |
Webhook reference - potential data exfiltration
| 104 | URL: https://your-api.com/webhooks/granola |
Webhook reference - potential data exfiltration
| 112 | hmac: "{{your_webhook_secret}}" |
Webhook reference - potential data exfiltration
| 117 | // webhook-handler.js |
Webhook reference - potential data exfiltration
| 122 | app.post('/webhooks/granola', async (req, res) => { |
Webhook reference - potential data exfiltration
| 125 | // Validate webhook (use HMAC or shared secret) |
Webhook reference - potential data exfiltration
| 158 | app.listen(3000, () => console.log('Granola webhook handler running on :3000')); |
Webhook reference - potential data exfiltration
| 168 | @app.post("/webhooks/granola") |
Webhook reference - potential data exfiltration
| 196 | | **Conditional** | Route by meeting type | Zapier Paths or custom webhook with routing logic | |
Webhook reference - potential data exfiltration
| 201 | Zapier handles retries automatically for failed actions. For custom webhooks: |
Webhook reference - potential data exfiltration
| 207 | app.post('/webhooks/granola', async (req, res) => { |
Webhook reference - potential data exfiltration
| 222 | - Custom webhook handler processing events |
Webhook reference - potential data exfiltration
| 232 | | Webhook timeout | Handler takes > 30s | Return 200 immediately, process async | |
Webhook reference - potential data exfiltration
| 237 | - [Zapier Webhooks Documentation](https://zapier.com/help/create/code-webhooks) |
External URL reference
| 104 | URL: https://your-api.com/webhooks/granola |
External URL reference
| 236 | - [Zapier Granola Integration](https://zapier.com/apps/granola/integrations) |
External URL reference
| 237 | - [Zapier Webhooks Documentation](https://zapier.com/help/create/code-webhooks) |
External URL reference
| 238 | - [4 Ways to Automate Granola](https://zapier.com/blog/automate-granola/) |