Skip to main content

tl-openmeter-api

Integrates with the OpenMeter REST API for managing usage metering, billing, and customer subscriptions effectively.

Install this skill

or
64/100

Security score

The tl-openmeter-api skill was audited on May 13, 2026 and we found 10 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 25

Webhook reference - potential data exfiltration

SourceSKILL.md
25| **tl-openmeter-local-dev** | Local dev setup: Docker, ngrok, Stripe App, webhooks |
medium line 54

Webhook reference - potential data exfiltration

SourceSKILL.md
54| 3 | **App: Stripe** | Stripe billing support (API key, webhook, checkout) |
medium line 291

Webhook reference - potential data exfiltration

SourceSKILL.md
291| Stripe webhook | POST | `/api/v1/apps/{id}/stripe/webhook` |
high line 25

Ngrok tunnel reference

SourceSKILL.md
25| **tl-openmeter-local-dev** | Local dev setup: Docker, ngrok, Stripe App, webhooks |
low line 72

External URL reference

SourceSKILL.md
72- **Base URL:** `OPENMETER_URL` (e.g. `http://localhost:8888` for local, or your deployed URL)
low line 383

External URL reference

SourceSKILL.md
383- [OpenMeter API Reference](https://openmeter.io/docs/api) — Official API documentation
low line 385

External URL reference

SourceSKILL.md
385- [CloudEvents Specification](https://cloudevents.io/) — Event format specification
low line 386

External URL reference

SourceSKILL.md
386- [OpenMeter Cloud](https://openmeter.cloud/) — Managed service
low line 390

External URL reference

SourceSKILL.md
390- [Node.js SDK](https://www.npmjs.com/package/@openmeter/sdk) — Official Node.js client
low line 392

External URL reference

SourceSKILL.md
392- [Go SDK](https://pkg.go.dev/github.com/openmeterio/openmeter/api/client/go) — Official Go client
Scanned on May 13, 2026
View Security Dashboard
Installation guide →