paperclip-setup
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the global installation of the
paperclipaiCLI tool from the npm registry, which is a recognized vendor resource for thebbengaminskill suite. - [REMOTE_CODE_EXECUTION]: The skill utilizes
npxto dynamically execute the@bbengamin/paperclip-mcp-serverpackage, serving as a fallback tool surface for the operator. - [COMMAND_EXECUTION]: The skill executes multiple system commands to manage the environment, including
npmfor installation,curlfor service health diagnostics, andclaudefor project-local MCP configuration. - [CREDENTIALS_UNSAFE]: The skill reads service-specific configuration and authentication files, such as
~/.paperclip/auth.jsonand.env, to establish connection context with the Paperclip API. it explicitly warns against hardcoding sensitive tokens in shared configuration files.
Audit Metadata