Skip to main content

chat-notifyer

Facilitates live chat operations on WhatsApp, enabling AI agents to manage conversations, send messages, and schedule interactions.

Install this skill

or
79/100

Security score

The chat-notifyer skill was audited on May 12, 2026 and we found 13 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Webhook reference - potential data exfiltration

SourceSKILL.md
30| 2 | automate-notifyer | Templates, AI Bots, Broadcasts, Analytics, Webhooks |
medium line 481

Webhook reference - potential data exfiltration

SourceSKILL.md
481- **No incoming message handling in scripts.** Incoming messages trigger webhooks (see `automate-notifyer` skill). Scripts cannot subscribe to or poll for new inbound messages.
low line 17

External URL reference

SourceSKILL.md
17api-base: https://api.insightssystem.com
low line 41

External URL reference

SourceSKILL.md
41| `NOTIFYER_API_BASE_URL` | **yes** | — | Backend API base URL (e.g. `https://api.insightssystem.com`) |
low line 43

External URL reference

SourceSKILL.md
43| `NOTIFYER_CHAT_ORIGIN` | no | `https://chat.notifyer-systems.com` | CORS Origin header for chat endpoints |
low line 46

External URL reference

SourceSKILL.md
46export NOTIFYER_API_BASE_URL="https://api.insightssystem.com"
low line 67

External URL reference

SourceSKILL.md
67- `https://chat.notifyer-systems.com` (primary)
low line 68

External URL reference

SourceSKILL.md
68- `https://console.notifyer-systems.com`
low line 69

External URL reference

SourceSKILL.md
69- `https://api.insightssystem.com`
low line 70

External URL reference

SourceSKILL.md
70- `https://preview-chat-notifyer.vercel.app`
low line 71

External URL reference

SourceSKILL.md
71- `http://localhost:5173`, `http://localhost:3000`, `http://127.0.0.1:5173`
low line 73

External URL reference

SourceSKILL.md
73Scripts automatically send `Origin: https://chat.notifyer-systems.com`.
low line 407

External URL reference

SourceSKILL.md
4076. **CORS endpoints**: All `/web/*` endpoints require `Origin: https://chat.notifyer-systems.com`. Scripts handle this automatically.
Scanned on May 12, 2026
View Security Dashboard
Installation guide →