Skip to main content

intercom-observability

Enables comprehensive observability for Intercom integrations with metrics, traces, and alerts for enhanced monitoring and performance.

Install this skill

or
70/100

Security score

The intercom-observability skill was audited on May 28, 2026 and we found 18 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 106

Template literal with variable interpolation in command context

SourceSKILL.md
106const endpoint = `${String(prop)}.${String(methodName)}`;
medium line 207

Template literal with variable interpolation in command context

SourceSKILL.md
207`intercom.${operationName}`,
low line 80

Webhook reference - potential data exfiltration

SourceSKILL.md
80// Webhook processing metrics
low line 81

Webhook reference - potential data exfiltration

SourceSKILL.md
81const webhookProcessed = new Counter({
low line 82

Webhook reference - potential data exfiltration

SourceSKILL.md
82name: "intercom_webhooks_processed_total",
low line 83

Webhook reference - potential data exfiltration

SourceSKILL.md
83help: "Intercom webhooks processed by topic",
low line 176

Webhook reference - potential data exfiltration

SourceSKILL.md
176// Webhook logger
low line 177

Webhook reference - potential data exfiltration

SourceSKILL.md
177function logWebhook(
low line 185

Webhook reference - potential data exfiltration

SourceSKILL.md
185type: "webhook",
low line 286

Webhook reference - potential data exfiltration

SourceSKILL.md
286- alert: IntercomWebhookFailures
low line 288

Webhook reference - potential data exfiltration

SourceSKILL.md
288rate(intercom_webhooks_processed_total{status="failed"}[5m]) > 0.1
low line 293

Webhook reference - potential data exfiltration

SourceSKILL.md
293summary: "Intercom webhook processing failures"
medium line 314

Webhook reference - potential data exfiltration

SourceSKILL.md
314| `intercom_webhooks_processed_total` | Counter | Failed > 10% |
low line 139

Access to .env file

SourceSKILL.md
139const rawClient = new IntercomClient({ token: process.env.INTERCOM_ACCESS_TOKEN! });
low line 150

Access to .env file

SourceSKILL.md
150level: process.env.LOG_LEVEL || "info",
low line 327

External URL reference

SourceSKILL.md
327- [Prometheus Best Practices](https://prometheus.io/docs/practices/naming/)
low line 328

External URL reference

SourceSKILL.md
328- [OpenTelemetry Node.js](https://opentelemetry.io/docs/languages/js/)
low line 329

External URL reference

SourceSKILL.md
329- [Pino Logger](https://getpino.io/)
Scanned on May 28, 2026
View Security Dashboard
Installation guide →