Skip to main content

pp-sendgrid

Facilitates SendGrid tasks via CLI, enabling efficient email management, suppression syncing, and analytics rollups.

Install this skill

or
14/100

Security score

The pp-sendgrid skill was audited on Jun 10, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 508

Webhook reference - potential data exfiltration

SourceSKILL.md
508- `sendgrid-pp-cli user create-event-webhook` — **This endpoint allows you to create a new Event Webhook.** When creating a webhook, you will provide a URL where...
medium line 511

Webhook reference - potential data exfiltration

SourceSKILL.md
511- `sendgrid-pp-cli user create-security-policy` — Create a new webhook security policy. Note: One of signature or oauth must be given to have a valid security policy.
medium line 512

Webhook reference - potential data exfiltration

SourceSKILL.md
512- `sendgrid-pp-cli user delete-event-webhook` — **This endpoint allows you to delete a single Event Webhook by ID.** Unlike the [**Get an Event...
medium line 515

Webhook reference - potential data exfiltration

SourceSKILL.md
515- `sendgrid-pp-cli user delete-security-policy` — Permanently delete a webhook security policy by its ID.
medium line 516

Webhook reference - potential data exfiltration

SourceSKILL.md
516- `sendgrid-pp-cli user get-event-webhook` — **This endpoint allows you to retrieve a single Event Webhook by ID.** If you do not pass a webhook ID to this...
medium line 519

Webhook reference - potential data exfiltration

SourceSKILL.md
519- `sendgrid-pp-cli user get-security-policy` — Retrieve the details of a specific webhook security policy by its ID.
medium line 520

Webhook reference - potential data exfiltration

SourceSKILL.md
520- `sendgrid-pp-cli user get-signed-event-webhook` — **This endpoint allows you to retrieve the public key for a single Event Webhook by ID.** If you do not pass a...
medium line 522

Webhook reference - potential data exfiltration

SourceSKILL.md
522- `sendgrid-pp-cli user list-all-security-policies` — Returns a list of all webhook security policies configured for your account, including their IDs, names, and...
medium line 526

Webhook reference - potential data exfiltration

SourceSKILL.md
526- `sendgrid-pp-cli user list-event-webhook` — **This endpoint allows you to retrieve all of your Event Webhooks.** Each webhook will be returned as an object in...
medium line 528

Webhook reference - potential data exfiltration

SourceSKILL.md
528- `sendgrid-pp-cli user list-parse-static` — **This endpoint allows you to retrieve the statistics for your Parse Webhook usage.** SendGrid's Inbound Parse...
medium line 532

Webhook reference - potential data exfiltration

SourceSKILL.md
532- `sendgrid-pp-cli user test-event-webhook` — **This endpoint allows you to test an Event Webhook.** Retry logic for this endpoint differs from other endpoints,...
medium line 535

Webhook reference - potential data exfiltration

SourceSKILL.md
535- `sendgrid-pp-cli user update-event-webhook` — **This endpoint allows you to update a single Event Webhook by ID.** If you do not pass a webhook ID to this...
medium line 540

Webhook reference - potential data exfiltration

SourceSKILL.md
540- `sendgrid-pp-cli user update-security-policy` — Update an existing webhook security policy with new configuration values.
medium line 541

Webhook reference - potential data exfiltration

SourceSKILL.md
541- `sendgrid-pp-cli user update-signed-event-webhook` — **This endpoint allows you to enable or disable signature verification for a single Event Webhook by ID.** If you do...
medium line 698

Webhook reference - potential data exfiltration

SourceSKILL.md
698| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 700

Webhook reference - potential data exfiltration

SourceSKILL.md
700Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 686

Access to hidden dotfiles in home directory

SourceSKILL.md
686Entries are stored locally at `~/.sendgrid-pp-cli/feedback.jsonl`. They are never POSTed unless `SENDGRID_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `SENDGRID_FEEDBACK_AUTO_SEND=true`.
low line 354

External URL reference

SourceSKILL.md
354- `sendgrid-pp-cli marketing update-contact` — **This endpoint allows the [upsert](https://en.wiktionary.org/wiki/upsert) (insert or update) of up to 30,000...
Scanned on Jun 10, 2026
View Security Dashboard
Installation guide →