Skip to main content

lindy-prod-checklist

Ensures production readiness for Lindy AI deployments with a comprehensive checklist and validation scripts.

Install this skill

or
50/100

Security score

The lindy-prod-checklist skill was audited on May 12, 2026 and we found 16 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 42

Webhook reference - potential data exfiltration

SourceSKILL.md
42- [ ] Webhook secrets generated for all webhook triggers
medium line 43

Webhook reference - potential data exfiltration

SourceSKILL.md
43- [ ] Webhook receivers verify Bearer token on every request
medium line 67

Webhook reference - potential data exfiltration

SourceSKILL.md
67- [ ] Webhooks: endpoint URLs use production domains (not ngrok/dev)
medium line 77

Webhook reference - potential data exfiltration

SourceSKILL.md
77- [ ] Webhook receivers return 200 quickly (process async)
low line 112

Webhook reference - potential data exfiltration

SourceSKILL.md
112"https://public.lindy.ai/api/v1/webhooks/health" 2>/dev/null || echo "000")
low line 115

Webhook reference - potential data exfiltration

SourceSKILL.md
115# 2. Webhook endpoint health
low line 116

Webhook reference - potential data exfiltration

SourceSKILL.md
116echo "[2/4] Testing webhook receiver..."
low line 119

Webhook reference - potential data exfiltration

SourceSKILL.md
119[ "$ENDPOINT_STATUS" = "200" ] && echo " OK: Webhook receiver healthy" || echo " FAIL: Receiver returned $ENDPOINT_STATUS"
low line 124

Webhook reference - potential data exfiltration

SourceSKILL.md
124[ -n "$LINDY_WEBHOOK_SECRET" ] && echo " OK: LINDY_WEBHOOK_SECRET set" || echo " FAIL: LINDY_WEBHOOK_SECRET missing"
high line 67

Ngrok tunnel reference

SourceSKILL.md
67- [ ] Webhooks: endpoint URLs use production domains (not ngrok/dev)
medium line 44

Access to .env file

SourceSKILL.md
44- [ ] `.env` files excluded from version control
low line 112

External URL reference

SourceSKILL.md
112"https://public.lindy.ai/api/v1/webhooks/health" 2>/dev/null || echo "000")
low line 118

External URL reference

SourceSKILL.md
118"https://your-app.com/health" 2>/dev/null || echo "000")
low line 127

External URL reference

SourceSKILL.md
127echo "[4/4] Credit status: Check at https://app.lindy.ai/settings/billing"
low line 155

External URL reference

SourceSKILL.md
155- [Lindy Pricing](https://www.lindy.ai/pricing)
low line 156

External URL reference

SourceSKILL.md
156- [Lindy Security](https://www.lindy.ai/security)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →