glean-webhooks-events
Facilitates event-driven indexing for Glean using webhooks from platforms like GitHub and Notion, enhancing data integration.
Install this skill
Security score
The glean-webhooks-events skill was audited on May 24, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Fetch to external URL
| 31 | const response = await fetch("https://yourapp.com/admin/webhooks", { |
Webhook reference - potential data exfiltration
| 2 | name: glean-webhooks-events |
Webhook reference - potential data exfiltration
| 3 | description: 'Implement event-driven Glean indexing triggered by source system webhooks |
Webhook reference - potential data exfiltration
| 8 | Trigger: "glean webhooks", "glean event indexing", "incremental glean index". |
Webhook reference - potential data exfiltration
| 21 | # Glean Webhooks & Events |
Webhook reference - potential data exfiltration
| 25 | Glean uses an event-driven indexing model where source system webhooks trigger incremental updates to the Glean Indexing API. Instead of emitting its own webhooks, Glean receives document changes from |
Webhook reference - potential data exfiltration
| 27 | ## Webhook Registration |
Webhook reference - potential data exfiltration
| 30 | // Register a source system webhook that pushes to Glean Indexing API |
Webhook reference - potential data exfiltration
| 31 | const response = await fetch("https://yourapp.com/admin/webhooks", { |
Webhook reference - potential data exfiltration
| 35 | url: "https://yourapp.com/webhooks/glean-indexer", |
Webhook reference - potential data exfiltration
| 37 | secret: process.env.GLEAN_WEBHOOK_SECRET, |
Webhook reference - potential data exfiltration
| 50 | const expected = crypto.createHmac("sha256", process.env.GLEAN_WEBHOOK_SECRET!) |
Webhook reference - potential data exfiltration
| 65 | app.post("/webhooks/glean-indexer", express.raw({ type: "application/json" }), verifyGleanSignature, (req, res) => { |
Access to .env file
| 37 | secret: process.env.GLEAN_WEBHOOK_SECRET, |
Access to .env file
| 50 | const expected = crypto.createHmac("sha256", process.env.GLEAN_WEBHOOK_SECRET!) |
External URL reference
| 31 | const response = await fetch("https://yourapp.com/admin/webhooks", { |
External URL reference
| 35 | url: "https://yourapp.com/webhooks/glean-indexer", |
External URL reference
| 119 | - [Glean Indexing API](https://developers.glean.com/api/indexing-api/index-documents) |