Skip to main content

intercom

Manages customer interactions and support tickets using the Intercom REST API for efficient communication and contact management.

Install this skill

or
0/100

Security score

The intercom skill was audited on Feb 12, 2026 and we found 110 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 50

Template literal with variable interpolation in command context

SourceSKILL.md
50```bash
high line 79

Template literal with variable interpolation in command context

SourceSKILL.md
79- `Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}`
medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91```bash
medium line 113

Template literal with variable interpolation in command context

SourceSKILL.md
113```bash
medium line 134

Template literal with variable interpolation in command context

SourceSKILL.md
134```bash
medium line 144

Template literal with variable interpolation in command context

SourceSKILL.md
144```bash
medium line 167

Template literal with variable interpolation in command context

SourceSKILL.md
167```bash
medium line 179

Template literal with variable interpolation in command context

SourceSKILL.md
179```bash
medium line 203

Template literal with variable interpolation in command context

SourceSKILL.md
203```bash
medium line 233

Template literal with variable interpolation in command context

SourceSKILL.md
233```bash
medium line 243

Template literal with variable interpolation in command context

SourceSKILL.md
243```bash
medium line 253

Template literal with variable interpolation in command context

SourceSKILL.md
253```bash
medium line 282

Template literal with variable interpolation in command context

SourceSKILL.md
282```bash
medium line 304

Template literal with variable interpolation in command context

SourceSKILL.md
304```bash
medium line 327

Template literal with variable interpolation in command context

SourceSKILL.md
327```bash
medium line 350

Template literal with variable interpolation in command context

SourceSKILL.md
350```bash
medium line 372

Template literal with variable interpolation in command context

SourceSKILL.md
372```bash
medium line 392

Template literal with variable interpolation in command context

SourceSKILL.md
392```bash
medium line 402

Template literal with variable interpolation in command context

SourceSKILL.md
402```bash
medium line 422

Template literal with variable interpolation in command context

SourceSKILL.md
422```bash
medium line 442

Template literal with variable interpolation in command context

SourceSKILL.md
442```bash
medium line 452

Template literal with variable interpolation in command context

SourceSKILL.md
452```bash
medium line 462

Template literal with variable interpolation in command context

SourceSKILL.md
462```bash
medium line 472

Template literal with variable interpolation in command context

SourceSKILL.md
472```bash
medium line 496

Template literal with variable interpolation in command context

SourceSKILL.md
496```bash
medium line 516

Template literal with variable interpolation in command context

SourceSKILL.md
516```bash
medium line 542

Template literal with variable interpolation in command context

SourceSKILL.md
542```bash
medium line 566

Template literal with variable interpolation in command context

SourceSKILL.md
566```bash
medium line 587

Template literal with variable interpolation in command context

SourceSKILL.md
587```bash
medium line 604

Template literal with variable interpolation in command context

SourceSKILL.md
604```bash
medium line 622

Template literal with variable interpolation in command context

SourceSKILL.md
622```bash
medium line 682

Template literal with variable interpolation in command context

SourceSKILL.md
682```bash
medium line 51

Curl to non-GitHub URL

SourceSKILL.md
51bash -c 'curl -s "https://api.intercom.io/admins" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq '.admins[] | {id, name, email}'
high line 69

Curl to non-GitHub URL

SourceSKILL.md
69> bash -c 'curl -s "https://api.example.com" -H "Authorization: Bearer $API_KEY"' | jq .
medium line 92

Curl to non-GitHub URL

SourceSKILL.md
92bash -c 'curl -s "https://api.intercom.io/admins" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq '.admins[] | {id, name, email}'
medium line 114

Curl to non-GitHub URL

SourceSKILL.md
114bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom-Version:
medium line 135

Curl to non-GitHub URL

SourceSKILL.md
135bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom-Version:
medium line 145

Curl to non-GitHub URL

SourceSKILL.md
145curl -s "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"
medium line 168

Curl to non-GitHub URL

SourceSKILL.md
168curl -s -X PATCH "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom
medium line 180

Curl to non-GitHub URL

SourceSKILL.md
180curl -s -X DELETE "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"
medium line 204

Curl to non-GitHub URL

SourceSKILL.md
204bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
medium line 234

Curl to non-GitHub URL

SourceSKILL.md
234bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
medium line 244

Curl to non-GitHub URL

SourceSKILL.md
244bash -c 'curl -s "https://api.intercom.io/conversations?order=desc&sort=updated_at" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq
medium line 254

Curl to non-GitHub URL

SourceSKILL.md
254bash -c 'curl -s "https://api.intercom.io/conversations/<your-conversation-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"'
medium line 283

Curl to non-GitHub URL

SourceSKILL.md
283bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/int
medium line 305

Curl to non-GitHub URL

SourceSKILL.md
305bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/int
medium line 328

Curl to non-GitHub URL

SourceSKILL.md
328bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
medium line 351

Curl to non-GitHub URL

SourceSKILL.md
351bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
medium line 373

Curl to non-GitHub URL

SourceSKILL.md
373bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
medium line 393

Curl to non-GitHub URL

SourceSKILL.md
393bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/notes" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
medium line 403

Curl to non-GitHub URL

SourceSKILL.md
403bash -c 'curl -s "https://api.intercom.io/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"' | jq '.data[] | {id, name}'
medium line 423

Curl to non-GitHub URL

SourceSKILL.md
423bash -c 'curl -s -X POST "https://api.intercom.io/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_request.js
medium line 443

Curl to non-GitHub URL

SourceSKILL.md
443bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -
medium line 453

Curl to non-GitHub URL

SourceSKILL.md
453curl -s -X DELETE "https://api.intercom.io/contacts/<your-contact-id>/tags/<your-tag-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"
medium line 463

Curl to non-GitHub URL

SourceSKILL.md
463bash -c 'curl -s "https://api.intercom.io/articles" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"' | jq '.data[] | {id, title, url}'
medium line 473

Curl to non-GitHub URL

SourceSKILL.md
473bash -c 'curl -s "https://api.intercom.io/articles/<your-article-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"'
medium line 497

Curl to non-GitHub URL

SourceSKILL.md
497bash -c 'curl -s -X POST "https://api.intercom.io/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_reque
medium line 517

Curl to non-GitHub URL

SourceSKILL.md
517bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.
medium line 543

Curl to non-GitHub URL

SourceSKILL.md
543bash -c 'curl -s -X POST "https://api.intercom.io/events" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_request.
medium line 568

Curl to non-GitHub URL

SourceSKILL.md
568OPEN_CONVS="$(bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14
medium line 588

Curl to non-GitHub URL

SourceSKILL.md
588bash -c 'curl -s -X POST "https://api.intercom.io/conversations/${OPEN_CONVS}/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
medium line 606

Curl to non-GitHub URL

SourceSKILL.md
606CONTACT_ID=$(bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/in
medium line 623

Curl to non-GitHub URL

SourceSKILL.md
623bash -c 'curl -s -X POST "https://api.intercom.io/contacts/${CONTACT_ID}/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
medium line 683

Curl to non-GitHub URL

SourceSKILL.md
683bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
low line 12

External URL reference

SourceSKILL.md
12> Official docs: `https://developers.intercom.com/docs`
low line 36

External URL reference

SourceSKILL.md
361. Log in to your [Intercom workspace](https://app.intercom.com/)
low line 51

External URL reference

SourceSKILL.md
51bash -c 'curl -s "https://api.intercom.io/admins" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq '.admins[] | {id, name, email}'
low line 60

External URL reference

SourceSKILL.md
60- **US (Default)**: `https://api.intercom.io/`
low line 61

External URL reference

SourceSKILL.md
61- **Europe**: `https://api.eu.intercom.io/`
low line 62

External URL reference

SourceSKILL.md
62- **Australia**: `https://api.au.intercom.io/`
low line 69

External URL reference

SourceSKILL.md
69> bash -c 'curl -s "https://api.example.com" -H "Authorization: Bearer $API_KEY"' | jq .
low line 76

External URL reference

SourceSKILL.md
76**Base URL**: `https://api.intercom.io/`
low line 92

External URL reference

SourceSKILL.md
92bash -c 'curl -s "https://api.intercom.io/admins" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq '.admins[] | {id, name, email}'
low line 114

External URL reference

SourceSKILL.md
114bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom-Version:
low line 135

External URL reference

SourceSKILL.md
135bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom-Version:
low line 145

External URL reference

SourceSKILL.md
145curl -s "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"
low line 168

External URL reference

SourceSKILL.md
168curl -s -X PATCH "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Accept: application/json" -H "Intercom
low line 180

External URL reference

SourceSKILL.md
180curl -s -X DELETE "https://api.intercom.io/contacts/<your-contact-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"
low line 204

External URL reference

SourceSKILL.md
204bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
low line 234

External URL reference

SourceSKILL.md
234bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
low line 244

External URL reference

SourceSKILL.md
244bash -c 'curl -s "https://api.intercom.io/conversations?order=desc&sort=updated_at" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"' | jq
low line 254

External URL reference

SourceSKILL.md
254bash -c 'curl -s "https://api.intercom.io/conversations/<your-conversation-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Accept: application/json" -H "Intercom-Version: 2.14"'
low line 283

External URL reference

SourceSKILL.md
283bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/int
low line 305

External URL reference

SourceSKILL.md
305bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/int
low line 328

External URL reference

SourceSKILL.md
328bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
low line 351

External URL reference

SourceSKILL.md
351bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
low line 373

External URL reference

SourceSKILL.md
373bash -c 'curl -s -X POST "https://api.intercom.io/conversations/<your-conversation-id>/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Versi
low line 393

External URL reference

SourceSKILL.md
393bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/notes" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
low line 403

External URL reference

SourceSKILL.md
403bash -c 'curl -s "https://api.intercom.io/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"' | jq '.data[] | {id, name}'
low line 423

External URL reference

SourceSKILL.md
423bash -c 'curl -s -X POST "https://api.intercom.io/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_request.js
low line 443

External URL reference

SourceSKILL.md
443bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/tags" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -
low line 453

External URL reference

SourceSKILL.md
453curl -s -X DELETE "https://api.intercom.io/contacts/<your-contact-id>/tags/<your-tag-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"
low line 463

External URL reference

SourceSKILL.md
463bash -c 'curl -s "https://api.intercom.io/articles" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"' | jq '.data[] | {id, title, url}'
low line 473

External URL reference

SourceSKILL.md
473bash -c 'curl -s "https://api.intercom.io/articles/<your-article-id>" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Intercom-Version: 2.14"'
low line 490

External URL reference

SourceSKILL.md
490"website": "https://acme.com"
low line 497

External URL reference

SourceSKILL.md
497bash -c 'curl -s -X POST "https://api.intercom.io/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_reque
low line 517

External URL reference

SourceSKILL.md
517bash -c 'curl -s -X POST "https://api.intercom.io/contacts/<your-contact-id>/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.
low line 543

External URL reference

SourceSKILL.md
543bash -c 'curl -s -X POST "https://api.intercom.io/events" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom_request.
low line 568

External URL reference

SourceSKILL.md
568OPEN_CONVS="$(bash -c 'curl -s -X POST "https://api.intercom.io/conversations/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14
low line 588

External URL reference

SourceSKILL.md
588bash -c 'curl -s -X POST "https://api.intercom.io/conversations/${OPEN_CONVS}/parts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
low line 606

External URL reference

SourceSKILL.md
606CONTACT_ID=$(bash -c 'curl -s -X POST "https://api.intercom.io/contacts" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/in
low line 623

External URL reference

SourceSKILL.md
623bash -c 'curl -s -X POST "https://api.intercom.io/contacts/${CONTACT_ID}/companies" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14"
low line 683

External URL reference

SourceSKILL.md
683bash -c 'curl -s -X POST "https://api.intercom.io/contacts/search" -H "Authorization: Bearer ${INTERCOM_ACCESS_TOKEN}" -H "Content-Type: application/json" -H "Intercom-Version: 2.14" -d @/tmp/intercom
low line 726

External URL reference

SourceSKILL.md
726- Main Documentation: https://developers.intercom.com/docs
low line 727

External URL reference

SourceSKILL.md
727- API Reference: https://developers.intercom.com/docs/references/rest-api/api-intercom-com/
low line 728

External URL reference

SourceSKILL.md
728- Authentication: https://developers.intercom.com/docs/build-an-integration/learn-more/authentication/
low line 729

External URL reference

SourceSKILL.md
729- Rate Limiting: https://developers.intercom.com/docs/references/rest-api/errors/rate-limiting/
low line 730

External URL reference

SourceSKILL.md
730- Contacts API: https://developers.intercom.com/docs/references/rest-api/api-intercom-com/contacts/
low line 731

External URL reference

SourceSKILL.md
731- Conversations API: https://developers.intercom.com/docs/references/rest-api/api-intercom-com/conversations/
low line 732

External URL reference

SourceSKILL.md
732- Developer Hub: https://app.intercom.com/a/apps/_/developer-hub
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →