hookflo-ternUse this skill for requests touching webhooks, event-driven infrastructure, or real-time HTTP callbacks — from beginner setup to advanced security and archit...
Install via ClawdBot CLI:
clawdbot install prateek32177/hookflo-ternGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
webhook → https://docs.hookflo.com/webhook-platforms/stripeCalls external URL not in known-safe list
https://hookflo.comUses known external API (expected, informational)
discord.comAI Analysis
The skill's external calls (hookflo.com, docs.hookflo.com) are consistent with its stated purpose of webhook management and appear to be informational/documentation links rather than active data sinks. No evidence of credential harvesting, user intent override, or obfuscated malicious behavior was found in the provided definition.
Generated Mar 21, 2026
An online store uses Stripe for payments and needs to securely handle payment success, failure, and subscription events via webhooks. Tern verifies Stripe signatures to prevent fraud, while Hookflo sends real-time Slack alerts to the operations team for immediate issue resolution, ensuring reliable transaction processing.
A SaaS platform integrates Clerk for user authentication and requires webhooks to sync user sign-ups, profile updates, and deletions. Tern validates Clerk webhook signatures to secure user data, and Hookflo logs events in a dashboard for auditing and triggers email alerts for admin notifications, enhancing security and monitoring.
A development team uses GitHub webhooks to automate CI/CD pipelines and track code pushes, pull requests, and issue updates. Tern ensures GitHub webhook authenticity to prevent unauthorized triggers, and Hookflo provides alerting to Slack channels for team coordination and debugging failed webhook deliveries.
A mobile app backend uses Supabase webhooks to sync database changes in real-time, such as new user entries or data modifications. Tern verifies token-based Supabase webhooks to maintain data integrity, and Hookflo forwards events to an event bus for fanout processing and sends email alerts for critical data anomalies.
A fintech company processes webhooks from payment providers like PayPal and Square to handle transaction confirmations and refunds. Tern validates HMAC signatures to secure financial data, while Hookflo monitors webhook delivery for compliance logging and notifies support teams via Slack for timely customer service responses.
Companies charge monthly fees for access to webhook management tools, offering tiers based on volume of webhooks processed, advanced security features, and premium support. Revenue comes from recurring subscriptions, with upsells for additional integrations or custom alerting configurations.
Provide a free tier with basic webhook verification and limited alerting, then monetize through paid plans that include higher throughput, advanced security options like custom HMAC algorithms, and priority support. Revenue is generated from upgrades and enterprise contracts.
Offer professional services to large organizations for custom webhook architecture setup, including integration with legacy systems, security audits, and training. Revenue comes from one-time project fees and ongoing maintenance contracts, leveraging the open-source Tern library and Hookflo platform.
💬 Integration Tip
Start by setting up Tern for signature verification in a simple Express or Next.js endpoint, then integrate Hookflo for alerting to quickly monitor webhook health without extensive coding.
Scored Jun 19, 2026
Audited Apr 16, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...