granola-webhooks-events
Facilitates event-driven automations using Granola webhooks for real-time notifications and custom integrations.
Install this skill
Security score
The granola-webhooks-events skill was audited on May 23, 2026 and we found 32 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 136 | console.log(`Meeting received: ${title} (${datetime})`); |
Template literal with variable interpolation in command context
| 158 | console.log(`External meeting: ${title}, ${actionItems.length} action items`); |
Template literal with variable interpolation in command context
| 163 | console.log(`Internal meeting: ${title}, ${actionItems.length} action items`); |
Template literal with variable interpolation in command context
| 217 | const noteId = `${req.body.title}-${req.body.datetime}`; |
Webhook reference - potential data exfiltration
| 2 | name: granola-webhooks-events |
Webhook reference - potential data exfiltration
| 3 | description: 'Build event-driven automations with Granola''s Zapier webhook triggers. |
Webhook reference - potential data exfiltration
| 9 | Trigger: "granola webhooks", "granola events", "granola triggers", |
Webhook reference - potential data exfiltration
| 21 | - webhooks |
Webhook reference - potential data exfiltration
| 25 | # Granola Webhooks & Events |
Webhook reference - potential data exfiltration
| 29 | Granola does not expose raw webhook endpoints. All event-driven automation flows through Zapier, which provides two trigger events. This skill covers the event model, webhook payload structure, event |
Webhook reference - potential data exfiltration
| 35 | - Optional: custom webhook endpoint (Express.js, FastAPI, or serverless function) |
Webhook reference - potential data exfiltration
| 41 | Granola fires events through Zapier triggers, not direct webhooks. Two triggers are available: |
Webhook reference - potential data exfiltration
| 48 | ### Step 2 — Webhook Payload Structure |
Webhook reference - potential data exfiltration
| 103 | ### Step 4 — Build a Custom Webhook Handler |
Webhook reference - potential data exfiltration
| 110 | Action: Webhooks by Zapier — POST |
Webhook reference - potential data exfiltration
| 111 | URL: https://your-api.com/webhooks/granola |
Webhook reference - potential data exfiltration
| 119 | hmac: "{{your_webhook_secret}}" |
Webhook reference - potential data exfiltration
| 125 | // webhook-handler.js |
Webhook reference - potential data exfiltration
| 130 | app.post('/webhooks/granola', async (req, res) => { |
Webhook reference - potential data exfiltration
| 133 | // Validate webhook (use HMAC or shared secret) |
Webhook reference - potential data exfiltration
| 166 | app.listen(3000, () => console.log('Granola webhook handler running on :3000')); |
Webhook reference - potential data exfiltration
| 177 | @app.post("/webhooks/granola") |
Webhook reference - potential data exfiltration
| 205 | | **Conditional** | Route by meeting type | Zapier Paths or custom webhook with routing logic | |
Webhook reference - potential data exfiltration
| 210 | Zapier handles retries automatically for failed actions. For custom webhooks: |
Webhook reference - potential data exfiltration
| 216 | app.post('/webhooks/granola', async (req, res) => { |
Webhook reference - potential data exfiltration
| 232 | - Custom webhook handler processing events |
Webhook reference - potential data exfiltration
| 242 | | Webhook timeout | Handler takes > 30s | Return 200 immediately, process async | |
Webhook reference - potential data exfiltration
| 248 | - [Zapier Webhooks Documentation](https://zapier.com/help/create/code-webhooks) |
External URL reference
| 111 | URL: https://your-api.com/webhooks/granola |
External URL reference
| 247 | - [Zapier Granola Integration](https://zapier.com/apps/granola/integrations) |
External URL reference
| 248 | - [Zapier Webhooks Documentation](https://zapier.com/help/create/code-webhooks) |
External URL reference
| 249 | - [4 Ways to Automate Granola](https://zapier.com/blog/automate-granola/) |