pachca-bots
Facilitates bot management and webhook handling for automated tasks and alerts using Pachca's CLI tools.
Install this skill
Security score
The pachca-bots skill was audited on May 12, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 52 | 1. Создай бота в интерфейсе Пачки: Автоматизации → Интеграции → Webhook |
Webhook reference - potential data exfiltration
| 56 | 3. Укажи Webhook URL для получения событий |
Webhook reference - potential data exfiltration
| 58 | > Бот создаётся через UI, не через API. Единственный эндпоинт для ботов — PUT /bots/{id} (обновление webhook URL). API используется для отправки сообщений от имени бота. |
Webhook reference - potential data exfiltration
| 61 | ### Обновить Webhook URL бота |
Webhook reference - potential data exfiltration
| 63 | 1. Обнови webhook URL бота: |
Webhook reference - potential data exfiltration
| 65 | pachca bots update <bot_id> --webhook='{"outgoing_url":"https://example.com/webhook"}' |
Webhook reference - potential data exfiltration
| 98 | | GET | /webhooks/events | История событий | |
Webhook reference - potential data exfiltration
| 99 | | DELETE | /webhooks/events/{id} | Удаление события | |
Webhook reference - potential data exfiltration
| 104 | references/handle-incoming-webhook-event.md — Handle incoming webhook event |
Webhook reference - potential data exfiltration
| 110 | references/webhook-events.md — Webhook event types |
External URL reference
| 65 | pachca bots update <bot_id> --webhook='{"outgoing_url":"https://example.com/webhook"}' |