paperclip-setup

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the global installation of the paperclipai CLI tool from the npm registry, which is a recognized vendor resource for the bbengamin skill suite.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx to dynamically execute the @bbengamin/paperclip-mcp-server package, serving as a fallback tool surface for the operator.
  • [COMMAND_EXECUTION]: The skill executes multiple system commands to manage the environment, including npm for installation, curl for service health diagnostics, and claude for project-local MCP configuration.
  • [CREDENTIALS_UNSAFE]: The skill reads service-specific configuration and authentication files, such as ~/.paperclip/auth.json and .env, to establish connection context with the Paperclip API. it explicitly warns against hardcoding sensitive tokens in shared configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 08:27 PM
Security Audit — agent-trust-hub — paperclip-setup