paperclip-create-agent
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the operator to install the global CLI tool
paperclipaivia the npm package manager (npm install -g paperclipai). It also utilizes the@bbengamin/paperclip-mcp-servervianpxto provide Model Context Protocol capabilities. These resources are associated with the skill's author and follow standard installation patterns for developer tools. - [COMMAND_EXECUTION]: The skill frequently executes shell commands via the
paperclipaiCLI to perform operations such as listing companies, creating agents, and managing issue lifecycles. All mutating commands require explicit human operator approval before execution. - [CREDENTIALS_UNSAFE]: The skill manages Paperclip API keys and board credentials. It reads sensitive authentication data from local files like
~/.paperclip/auth.jsonand uses environment variables likePAPERCLIP_API_KEY. It contains explicit instructions to never print long-lived API keys in the chat and to use secure methods for exporting credentials, aligning with safe secret management practices.
Audit Metadata