lindy-prod-checklist
Ensures production readiness for Lindy AI deployments with a comprehensive checklist and validation scripts.
Install this skill
Security score
The lindy-prod-checklist skill was audited on Jun 2, 2026 and we found 15 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 45 | - [ ] Webhook secrets generated for all webhook triggers |
Webhook reference - potential data exfiltration
| 46 | - [ ] Webhook receivers verify Bearer token on every request |
Webhook reference - potential data exfiltration
| 72 | - [ ] Webhooks: endpoint URLs use production domains (not ngrok/dev) |
Webhook reference - potential data exfiltration
| 83 | - [ ] Webhook receivers return 200 quickly (process async) |
Webhook reference - potential data exfiltration
| 122 | "https://public.lindy.ai/api/v1/webhooks/health" 2>/dev/null || echo "000") |
Webhook reference - potential data exfiltration
| 125 | # 2. Webhook endpoint health |
Webhook reference - potential data exfiltration
| 126 | echo "[2/4] Testing webhook receiver..." |
Webhook reference - potential data exfiltration
| 129 | [ "$ENDPOINT_STATUS" = "200" ] && echo " OK: Webhook receiver healthy" || echo " FAIL: Receiver returned $ENDPOINT_STATUS" |
Webhook reference - potential data exfiltration
| 134 | [ -n "$LINDY_WEBHOOK_SECRET" ] && echo " OK: LINDY_WEBHOOK_SECRET set" || echo " FAIL: LINDY_WEBHOOK_SECRET missing" |
Ngrok tunnel reference
| 72 | - [ ] Webhooks: endpoint URLs use production domains (not ngrok/dev) |
Access to .env file
| 47 | - [ ] `.env` files excluded from version control |
External URL reference
| 122 | "https://public.lindy.ai/api/v1/webhooks/health" 2>/dev/null || echo "000") |
External URL reference
| 128 | "https://your-app.com/health" 2>/dev/null || echo "000") |
External URL reference
| 166 | - [Lindy Pricing](https://www.lindy.ai/pricing) |
External URL reference
| 167 | - [Lindy Security](https://www.lindy.ai/security) |