clerk-observability
Enables comprehensive monitoring and logging for Clerk authentication, aiding in debugging and audit logging for production environments.
Install this skill
Security score
The clerk-observability skill was audited on Jun 2, 2026 and we found 19 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 96 | console.warn(`[Auth Perf] ${req.nextUrl.pathname} took ${duration}ms`, { |
Template literal with variable interpolation in command context
| 104 | response.headers.set('X-Auth-Duration', `${duration}ms`) |
Webhook reference - potential data exfiltration
| 30 | Implement monitoring, logging, and observability for Clerk authentication. Covers structured auth logging, middleware performance tracking, webhook event monitoring, Sentry integration, and health che |
Webhook reference - potential data exfiltration
| 108 | ### Step 3: Webhook Event Tracking |
Webhook reference - potential data exfiltration
| 111 | // app/api/webhooks/clerk/route.ts |
Webhook reference - potential data exfiltration
| 114 | async function handleWebhookEvent(evt: WebhookEvent) { |
Webhook reference - potential data exfiltration
| 117 | // Track webhook processing metrics |
Webhook reference - potential data exfiltration
| 129 | path: '/webhooks/clerk', |
Webhook reference - potential data exfiltration
| 139 | path: '/webhooks/clerk', |
Webhook reference - potential data exfiltration
| 147 | path: '/webhooks/clerk', |
Webhook reference - potential data exfiltration
| 154 | // Alert on slow webhook processing |
Webhook reference - potential data exfiltration
| 156 | console.error('[Webhook] Slow processing:', metrics) |
Webhook reference - potential data exfiltration
| 276 | webhookEvents24h: await db.webhookEvent.count({ |
Webhook reference - potential data exfiltration
| 289 | - Webhook event monitoring with processing time metrics |
Webhook reference - potential data exfiltration
| 299 | | Webhook failure rate > 1% | Alert on processing errors, check endpoint health | |
Access to .env file
| 47 | level: process.env.LOG_LEVEL || 'info', |
Access to .env file
| 48 | transport: process.env.NODE_ENV === 'development' ? { target: 'pino-pretty' } : undefined, |
Access to .env file
| 203 | dsn: process.env.SENTRY_DSN, |
External URL reference
| 316 | - [Pino Logger](https://getpino.io/) |