sales-jotform
Provides assistance with Jotform for building forms, payment integration, and troubleshooting workflows effectively.
Install this skill
Security score
The sales-jotform skill was audited on Jun 3, 2026 and we found 13 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 3 | description: "Jotform platform help — form builder, payment forms, e-signatures, approval workflows, tables, PDF editor, app builder, API. Use when forms aren't submitting or showing 'Please Wait', co |
Webhook reference - potential data exfiltration
| 22 | - D) **Use the API** — create forms/submissions programmatically, webhooks, SDK setup |
Webhook reference - potential data exfiltration
| 24 | - F) **Integrate with other tools** — CRM sync, Zapier/Make, email platform, webhook to external system |
Webhook reference - potential data exfiltration
| 43 | | Connecting Jotform to CRM/email/other tools | `/sales-integration` — covers webhook design, Zapier/Make, field mapping | |
Webhook reference - potential data exfiltration
| 66 | - **API**: Webhooks only fire on form submit button — NOT on API-created submissions. If you need API-triggered notifications, poll the submissions endpoint or use a Zapier trigger instead. |
Webhook reference - potential data exfiltration
| 76 | 2. **Webhooks don't fire on API submissions** — submissions created via `POST /form/{formID}/submissions` do NOT trigger webhooks. Only form submit button clicks trigger them. |
Webhook reference - potential data exfiltration
| 77 | 3. **Webhook 30-second timeout** — if your endpoint takes longer than 30 seconds to respond, the webhook will fail. Process async. |
Webhook reference - potential data exfiltration
| 88 | - `/sales-integration` — Connect Jotform to CRM, email, or other tools via webhooks, Zapier/Make, or API. |
Webhook reference - potential data exfiltration
| 146 | ### "Webhook not firing after form submission" |
Webhook reference - potential data exfiltration
| 148 | - Verify the webhook URL is correct in Settings → Integrations → WebHooks. |
Webhook reference - potential data exfiltration
| 149 | - Test with a simple endpoint (e.g., webhook.site) to confirm Jotform is sending. |
Webhook reference - potential data exfiltration
| 150 | - If submissions are created via the API, webhooks will NOT fire — this is a known limitation. Use Zapier's "New Submission" trigger or poll the API instead. |
Webhook reference - potential data exfiltration
| 151 | - Check the 30-second timeout — if your endpoint is slow, the webhook will fail silently. |