Skylv Webhook Debugger

PassAudited by VirusTotal on May 4, 2026.

Overview

Type: OpenClaw Skill Name: skylv-webhook-debugger Version: 1.0.0 The skill bundle is a utility for testing and debugging webhooks, providing documentation and a generic PowerShell example using 'example.com'. It references standard industry tools like webhook.site and ngrok for legitimate testing purposes and contains no malicious code, data exfiltration logic, or suspicious instructions in SKILL.md or _meta.json.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may help send test requests to webhook URLs; using the wrong URL or real data could affect an external service.

Why it was flagged

The skill documents sending an HTTP POST payload, which is expected for webhook testing but should be limited to endpoints the user controls or is authorized to test.

Skill content
Invoke-RestMethod -Uri "https://example.com/webhook" -Method POST -Headers $headers -Body $body
Recommendation

Use synthetic payloads and confirm the target webhook URL before sending requests.

What this means

Webhook payloads or local test services could be visible to third-party debugging platforms or reachable through a tunnel.

Why it was flagged

The skill suggests public webhook inspection services and a tunneling tool, which are common for debugging but can expose payload contents or local services if used carelessly.

Skill content
- https://webhook.site - temporary public URL
- https://requestbin.com - inspect payloads
- ngrok http 3000 - forward to localhost
Recommendation

Do not send secrets, tokens, personal data, or production payloads to public debugging URLs, and close tunnels when testing is complete.