whatsapp-business-agent-skills
Provides a comprehensive suite of skills for managing WhatsApp business accounts, including setup, automation, and live chat operations.
Install this skill
Security score
The whatsapp-business-agent-skills skill was audited on May 13, 2026 and we found 16 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 8 | developer/IO webhooks. Phase 3 (chat-notifyer): live WhatsApp chat operations including |
Webhook reference - potential data exfiltration
| 32 | | 2 | `skills/automate-notifyer` | Templates, AI bots, broadcasts, analytics, webhooks | |
Webhook reference - potential data exfiltration
| 146 | # Webhooks |
Webhook reference - potential data exfiltration
| 147 | node skills/automate-notifyer/scripts/list-webhooks.js --type dev --pretty |
Webhook reference - potential data exfiltration
| 148 | node skills/automate-notifyer/scripts/create-webhook.js \ |
Webhook reference - potential data exfiltration
| 284 | automate-notifyer/ Phase 2 — templates, bots, broadcasts, analytics, webhooks |
External URL reference
| 14 | metadata: {"author":"whatsable","version":"0.4.0","product":"Notifyer by WhatsAble","api-base":"https://api.insightssystem.com","homepage":"https://github.com/Whatsable/whatsapp-business-agent-skills" |
External URL reference
| 19 | Agent skills for [Notifyer by WhatsAble](https://notifyer-systems.com) — three phases that |
External URL reference
| 44 | | `NOTIFYER_API_BASE_URL` | **yes** | API base URL — use `https://api.insightssystem.com` | |
External URL reference
| 46 | | `NOTIFYER_CHAT_ORIGIN` | no | CORS Origin override for Phase 3 chat endpoints (default: `https://chat.notifyer-systems.com`) | |
External URL reference
| 49 | export NOTIFYER_API_BASE_URL="https://api.insightssystem.com" |
External URL reference
| 53 | `NOTIFYER_API_BASE_URL` must start with `https://` — all three skill sets enforce this |
External URL reference
| 149 | --url "https://hook.eu2.make.com/abc" --incoming --outgoing --signature |
External URL reference
| 248 | - `NOTIFYER_API_BASE_URL` is validated at startup in every script. An `http://` |
External URL reference
| 256 | `https://console.notifyer-systems.com/pricing-plans` for plan changes. |
External URL reference
| 271 | if `NOTIFYER_API_BASE_URL` does not start with `https://`. |