Skip to main content

setup-notifyer

Manages Notifyer accounts via WhatsAble's Console API, enabling user authentication, subscription management, and WhatsApp connection checks.

Install this skill

or
85/100

Security score

The setup-notifyer skill was audited on May 13, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 307

Webhook reference - potential data exfiltration

SourceSKILL.md
307--feedback "delete-webhook.js endpoint has no server-side auth check in Xano" \
low line 308

Webhook reference - potential data exfiltration

SourceSKILL.md
308--type security --skill automate-notifyer --script delete-webhook.js
medium line 385

Webhook reference - potential data exfiltration

SourceSKILL.md
385Make webhook. No additional calls are needed.
low line 16

External URL reference

SourceSKILL.md
16api-base: https://api.insightssystem.com
low line 22

External URL reference

SourceSKILL.md
22(`https://api.insightssystem.com`). All Console API requests authenticate with
low line 35

External URL reference

SourceSKILL.md
35export NOTIFYER_API_BASE_URL="https://api.insightssystem.com"
low line 86

External URL reference

SourceSKILL.md
861. `NOTIFYER_API_BASE_URL` — set and starts with `https://`
low line 374

External URL reference

SourceSKILL.md
374`Origin: https://console.notifyer-systems.com` for console-mode requests and
low line 375

External URL reference

SourceSKILL.md
375`Origin: https://chat.notifyer-systems.com` for chat-mode requests. You never need
low line 400

External URL reference

SourceSKILL.md
400of a user — direct them to `https://console.notifyer-systems.com/pricing-plans`.
low line 473

External URL reference

SourceSKILL.md
473- **`NOTIFYER_API_BASE_URL` must be `https://`.** All three skills enforce this at startup — any `http://` or non-HTTPS URL is rejected immediately to prevent tokens being sent unencrypted or to a ro
Scanned on May 13, 2026
View Security Dashboard
Installation guide →