moltflow

Automates WhatsApp Business interactions, enabling session management, messaging, and real-time event monitoring for enhanced customer engagement.

Install this skill

or

0/100

Security score

The moltflow skill was audited on May 27, 2026 and we found 43 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 436

Curl to non-GitHub URL

SourceSKILL.md

436	curl -X POST https://apiv2.waiflow.app/api/v2/sessions \

medium line 442

Curl to non-GitHub URL

SourceSKILL.md

442	curl -X POST https://apiv2.waiflow.app/api/v2/sessions/{session_id}/start \

medium line 446

Curl to non-GitHub URL

SourceSKILL.md

446	curl https://apiv2.waiflow.app/api/v2/sessions/{session_id}/qr \

medium line 450

Curl to non-GitHub URL

SourceSKILL.md

450	curl -X POST https://apiv2.waiflow.app/api/v2/messages/send \

medium line 463

Curl to non-GitHub URL

SourceSKILL.md

463	curl -X POST https://apiv2.waiflow.app/api/v2/webhooks \

medium line 478

Curl to non-GitHub URL

SourceSKILL.md

478	curl https://apiv2.waiflow.app/api/v2/groups/available/{session_id} \

medium line 482

Curl to non-GitHub URL

SourceSKILL.md

482	curl -X POST https://apiv2.waiflow.app/api/v2/groups \

medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md

3	description: "WhatsApp Business automation API for sessions, messaging, groups, labels, and webhooks. Use when: whatsapp, send message, create session, qr code, monitor group, label contacts, webhook.

medium line 19

Webhook reference - potential data exfiltration

SourceSKILL.md

19	Manage WhatsApp sessions, send messages, monitor groups, organize with labels, and receive real-time events via webhooks.

medium line 29

Webhook reference - potential data exfiltration

SourceSKILL.md

29	Logistics company — "Set up a webhook so my dispatch system gets notified the moment a driver sends a delivery confirmation photo."

medium line 37

Webhook reference - potential data exfiltration

SourceSKILL.md

37	- "Set up a webhook" or "listen for WhatsApp events"

medium line 55

Webhook reference - potential data exfiltration

SourceSKILL.md

55	\| `webhooks` \| `read/manage` \|

medium line 358

Webhook reference - potential data exfiltration

SourceSKILL.md

358	## Webhooks

medium line 364

Webhook reference - potential data exfiltration

SourceSKILL.md

364	\| GET \| `/webhooks` \| List all webhooks \|

medium line 365

Webhook reference - potential data exfiltration

SourceSKILL.md

365	\| POST \| `/webhooks` \| Create a webhook \|

medium line 366

Webhook reference - potential data exfiltration

SourceSKILL.md

366	\| GET \| `/webhooks/{id}` \| Get webhook details \|

medium line 367

Webhook reference - potential data exfiltration

SourceSKILL.md

367	\| PATCH \| `/webhooks/{id}` \| Update a webhook \|

medium line 368

Webhook reference - potential data exfiltration

SourceSKILL.md

368	\| DELETE \| `/webhooks/{id}` \| Delete a webhook \|

medium line 369

Webhook reference - potential data exfiltration

SourceSKILL.md

369	\| POST \| `/webhooks/{id}/test` \| Send a test delivery \|

medium line 383

Webhook reference - potential data exfiltration

SourceSKILL.md

383	### Create Webhook

medium line 385

Webhook reference - potential data exfiltration

SourceSKILL.md

385	POST `/webhooks`

medium line 387

Webhook reference - potential data exfiltration

SourceSKILL.md

387	> Security: Webhook URLs are validated server-side — private IPs, cloud metadata endpoints, and non-HTTPS schemes are blocked. Only configure endpoints you control. Always set a `secret` for HMAC

low line 392

Webhook reference - potential data exfiltration

SourceSKILL.md

392	"url": "https://example.com/webhooks/moltflow",

low line 404

Webhook reference - potential data exfiltration

SourceSKILL.md

404	"url": "https://example.com/webhooks/moltflow",

medium line 411

Webhook reference - potential data exfiltration

SourceSKILL.md

411	### Webhook Payload

medium line 413

Webhook reference - potential data exfiltration

SourceSKILL.md

413	Deliveries include an HMAC-SHA256 signature in the `X-Webhook-Signature` header (if a secret is configured). Verify this to ensure authenticity.

medium line 460

Webhook reference - potential data exfiltration

SourceSKILL.md

460	### Set up a webhook for incoming messages

low line 463

Webhook reference - potential data exfiltration

SourceSKILL.md

463	curl -X POST https://apiv2.waiflow.app/api/v2/webhooks \

low line 468

Webhook reference - potential data exfiltration

SourceSKILL.md

468	"url": "https://myapp.com/webhooks/whatsapp",

low line 14

External URL reference

SourceSKILL.md

14	> *Due to high demand and a recent registration issue, we're offering our top-tier Business plan with unlimited quotas for just $19.90/month on yearly billing — for a limited time only.* [**Claim

low line 15

External URL reference

SourceSKILL.md

15	> Free tier available. [Sign up](https://molt.waiflow.app/checkout?plan=free)

low line 43

External URL reference

SourceSKILL.md

43	1. MOLTFLOW_API_KEY -- Generate from the [MoltFlow Dashboard](https://molt.waiflow.app) under Settings > API Keys

low line 45

External URL reference

SourceSKILL.md

45	3. Base URL: `https://apiv2.waiflow.app/api/v2`

low line 392

External URL reference

SourceSKILL.md

392	"url": "https://example.com/webhooks/moltflow",

low line 404

External URL reference

SourceSKILL.md

404	"url": "https://example.com/webhooks/moltflow",

low line 436

External URL reference

SourceSKILL.md

436	curl -X POST https://apiv2.waiflow.app/api/v2/sessions \

low line 442

External URL reference

SourceSKILL.md

442	curl -X POST https://apiv2.waiflow.app/api/v2/sessions/{session_id}/start \

low line 446

External URL reference

SourceSKILL.md

446	curl https://apiv2.waiflow.app/api/v2/sessions/{session_id}/qr \

low line 450

External URL reference

SourceSKILL.md

450	curl -X POST https://apiv2.waiflow.app/api/v2/messages/send \

low line 463

External URL reference

SourceSKILL.md

463	curl -X POST https://apiv2.waiflow.app/api/v2/webhooks \

low line 468

External URL reference

SourceSKILL.md

468	"url": "https://myapp.com/webhooks/whatsapp",

low line 478

External URL reference

SourceSKILL.md

478	curl https://apiv2.waiflow.app/api/v2/groups/available/{session_id} \

low line 482

External URL reference

SourceSKILL.md

482	curl -X POST https://apiv2.waiflow.app/api/v2/groups \

Scanned on May 27, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.0K

Rate this skill

Categorysales

UpdatedJune 10, 2026

openclaw api customer-success-manager social-media-manager growth-marketer business-development product-marketer whatsapp stripe sales marketing

LeoYeAI/openclaw-master-skills