courier-notification-skills
Facilitates building compliant and engaging notifications across multiple channels, enhancing user engagement and communication.
Install this skill
or
78/100
Security score
The courier-notification-skills skill was audited on May 25, 2026 and we found 14 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 3
Webhook reference - potential data exfiltration
SourceSKILL.md
| 3 | description: Use when building notifications with Courier across email, SMS, push, in-app inbox, Slack, Teams, or WhatsApp. Covers transactional messages (password reset, OTP, orders, billing), growth |
low line 224
Webhook reference - potential data exfiltration
SourceSKILL.md
| 224 | │ Webhooks │ |
medium line 339
Webhook reference - potential data exfiltration
SourceSKILL.md
| 339 | | Webhook setup & signature verification | [reliability.md](./resources/guides/reliability.md) | |
low line 49
Access to .env file
SourceSKILL.md
| 49 | // Reads process.env.COURIER_API_KEY by default |
low line 14
External URL reference
SourceSKILL.md
| 14 | 3. **Check for live docs** — For current API signatures and SDK methods, fetch `https://www.courier.com/docs/llms.txt` |
low line 171
External URL reference
SourceSKILL.md
| 171 | - **Guide them to migrate** using the step-by-step guide: `https://www.courier.com/docs/sdk-libraries/courier-react-v8-migration-guide` |
low line 180
External URL reference
SourceSKILL.md
| 180 | 1. Fetch `https://www.courier.com/docs/llms.txt` — returns a structured markdown index of all Courier documentation pages with URLs and descriptions |
low line 291
External URL reference
SourceSKILL.md
| 291 | The skill does not (yet) have dedicated guides for these areas. Fetch the page below via `WebFetch` when the user asks about them; do **not** invent API shapes from memory. When in doubt, fetch `https |
low line 295
External URL reference
SourceSKILL.md
| 295 | | Audiences (attribute-based targeting) | https://www.courier.com/docs/platform/users/audiences | |
low line 296
External URL reference
SourceSKILL.md
| 296 | | Automations (legacy dashboard workflows — for new multi-step flows, use [Journeys](./resources/guides/journeys.md)) | https://www.courier.com/docs/automations/overview | |
low line 297
External URL reference
SourceSKILL.md
| 297 | | Brands (logos, colors, reusable visual identity) | https://www.courier.com/docs/platform/content/brands | |
low line 298
External URL reference
SourceSKILL.md
| 298 | | Tenants (multi-tenant B2B, per-tenant branding/preferences) | https://www.courier.com/docs/platform/tenants/tenants-overview (also see [Patterns](./resources/guides/patterns.md) "Tenants" section fo |
low line 299
External URL reference
SourceSKILL.md
| 299 | | Events / event mapping | https://www.courier.com/docs/platform/automations/inbound-events (plus the `event` field on [Send API](https://www.courier.com/docs/reference/send/message)) | |
low line 300
External URL reference
SourceSKILL.md
| 300 | | Translations / i18n (beyond the per-template `locales` block) | https://www.courier.com/docs/platform/content/elemental/locales (element-level) or https://www.courier.com/docs/api-reference/translat |
Scanned on May 25, 2026
View Security DashboardGitHub Stars 8
Rate this skill
Categorymarketing
UpdatedMay 31, 2026
claudeclaude-codecursorwindsurfvscodefrontenddesignstripereactdocxapitestingdevopsmobilebackendemail-marketergrowth-marketercustomer-success-managerproduct-marketermarketing-analystslackmicrosoft-teamswhatsappemailmarketingsales
trycourier/courier-skills