pachca-bots
Facilitates bot management and webhook handling for automated tasks and alerts using Pachca's CLI tools.
Install this skill
Security score
The pachca-bots skill was audited on Mar 7, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 4 | Bot management, incoming/outgoing webhooks, link unfurling. Use when: set up |
Webhook reference - potential data exfiltration
| 5 | bot, handle webhook, handle button click, periodic digest, alerts, polling |
Webhook reference - potential data exfiltration
| 45 | ### Set up bot with outgoing webhook |
Webhook reference - potential data exfiltration
| 47 | 1. Create bot in Pachca UI: Automations → Integrations → Webhook |
Webhook reference - potential data exfiltration
| 51 | 3. Set Webhook URL for receiving events |
Webhook reference - potential data exfiltration
| 53 | > Bot is created via UI, not API. The only bot endpoint is PUT /bots/{id} (update webhook URL). API is used to send messages on behalf of bot. |
Webhook reference - potential data exfiltration
| 56 | ### Update bot webhook URL |
Webhook reference - potential data exfiltration
| 58 | 1. Update bot webhook URL: |
Webhook reference - potential data exfiltration
| 60 | pachca bots update <bot_id> --webhook='{"outgoing_url":"https://example.com/webhook"}' |
Webhook reference - potential data exfiltration
| 93 | | GET | /webhooks/events | История событий | |
Webhook reference - potential data exfiltration
| 94 | | DELETE | /webhooks/events/{id} | Удаление события | |
Webhook reference - potential data exfiltration
| 99 | references/handle-incoming-webhook-event.md — Handle incoming webhook event |
Webhook reference - potential data exfiltration
| 105 | references/webhook-events.md — Webhook event types |
External URL reference
| 60 | pachca bots update <bot_id> --webhook='{"outgoing_url":"https://example.com/webhook"}' |
Install this skill with one command
/learn @pachca/pachca-bots