intercom-hello-world
Provides a minimal working example for integrating with Intercom, covering contacts, conversations, and messaging functionalities.
Install this skill
Security score
The intercom-hello-world skill was audited on May 28, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 63 | console.log(`Created contact: ${user.id} (${user.role})`); |
Template literal with variable interpolation in command context
| 93 | console.log(`Found ${results.totalCount} contacts`); |
Template literal with variable interpolation in command context
| 95 | console.log(` ${contact.name} - ${contact.email} (${contact.role})`); |
Template literal with variable interpolation in command context
| 118 | console.log(`Sent message: ${message.id}`); |
Template literal with variable interpolation in command context
| 135 | console.log(`Conversation created: ${conversation.conversationId}`); |
Template literal with variable interpolation in command context
| 150 | console.log(`Tagged contact ${user.id} with "${tag.name}"`); |
Template literal with variable interpolation in command context
| 177 | console.log(`Authenticated as: ${admin.name}`); |
Template literal with variable interpolation in command context
| 182 | externalId: `hello-world-${Date.now()}`, |
Template literal with variable interpolation in command context
| 183 | email: `test-${Date.now()}@example.com`, |
Template literal with variable interpolation in command context
| 186 | console.log(`Contact: ${contact.id}`); |
Template literal with variable interpolation in command context
| 190 | console.log(`Total contacts in workspace: ${contacts.totalCount}`); |
Template literal with variable interpolation in command context
| 194 | console.log(`Total conversations: ${conversations.totalCount}`); |
Access to .env file
| 48 | token: process.env.INTERCOM_ACCESS_TOKEN!, |
Access to .env file
| 170 | token: process.env.INTERCOM_ACCESS_TOKEN!, |
External URL reference
| 211 | - [Contacts API](https://developers.intercom.com/docs/references/rest-api/api.intercom.io/contacts) |
External URL reference
| 212 | - [Conversations API](https://developers.intercom.com/docs/references/rest-api/api.intercom.io/conversations) |
External URL reference
| 213 | - [Messages API](https://developers.intercom.com/docs/references/rest-api/api.intercom.io/messages) |