Skip to main content

clerk-deploy-integration

Facilitates the deployment of Clerk-authenticated applications on platforms like Vercel, Netlify, and Railway with environment configuration.

Install this skill

or
62/100

Security score

The clerk-deploy-integration skill was audited on Jun 2, 2026 and we found 18 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 148

Template literal with variable interpolation in command context

SourceSKILL.md
148```bash
medium line 29

Webhook reference - potential data exfiltration

SourceSKILL.md
29Deploy Clerk-authenticated applications to Vercel, Netlify, Railway, and other hosting platforms. Covers environment variable configuration, domain setup, and webhook endpoint configuration.
low line 47

Webhook reference - potential data exfiltration

SourceSKILL.md
47vercel env add CLERK_WEBHOOK_SECRET production
low line 103

Webhook reference - potential data exfiltration

SourceSKILL.md
103railway variables set CLERK_WEBHOOK_SECRET=whsec_...
low line 141

Webhook reference - potential data exfiltration

SourceSKILL.md
141- CLERK_WEBHOOK_SECRET=whsec_...
low line 168

Webhook reference - potential data exfiltration

SourceSKILL.md
168# 4. Webhook endpoint reachable
low line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169STATUS=$(curl -s -o /dev/null -w "%{http_code}" -X POST "$DOMAIN/api/webhooks/clerk")
low line 170

Webhook reference - potential data exfiltration

SourceSKILL.md
170echo "Webhook endpoint: HTTP $STATUS (400/405 expected without valid payload)"
medium line 179

Webhook reference - potential data exfiltration

SourceSKILL.md
179- Webhook endpoint accessible at production URL
medium line 186

Webhook reference - potential data exfiltration

SourceSKILL.md
186| Webhook signature fails | Wrong endpoint URL | Update URL in Clerk Dashboard > Webhooks |
medium line 212

Webhook reference - potential data exfiltration

SourceSKILL.md
212Proceed to `clerk-webhooks-events` for webhook configuration.
low line 77

Access to .env file

SourceSKILL.md
77const clerk = createClerkClient({ secretKey: process.env.CLERK_SECRET_KEY! })
low line 58

External URL reference

SourceSKILL.md
582. Set **Home URL**: `https://myapp.com`
low line 59

External URL reference

SourceSKILL.md
593. Set **Sign-in URL**: `https://myapp.com/sign-in`
low line 60

External URL reference

SourceSKILL.md
604. Set **Sign-up URL**: `https://myapp.com/sign-up`
low line 61

External URL reference

SourceSKILL.md
615. Set **After sign-in URL**: `https://myapp.com/dashboard`
low line 153

External URL reference

SourceSKILL.md
153DOMAIN="${1:-https://myapp.com}"
low line 206

External URL reference

SourceSKILL.md
206- [Deploy to Vercel](https://clerk.com/docs/deployments/deploy-to-vercel)
Scanned on Jun 2, 2026
View Security Dashboard
Installation guide →