The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes the @useclawlink/cli package via npx to manage application integrations. This is an official package provided by the vendor for this purpose.
[COMMAND_EXECUTION]: The skill executes shell commands to perform authentication, list applications, and run integrations (e.g., npx @useclawlink/cli login, npx @useclawlink/cli connect). These are standard operational commands required for the skill's functionality.
[INDIRECT_PROMPT_INJECTION]: The skill connects the agent to external data sources such as Gmail, Slack, and Notion. While this exposes an attack surface for indirect prompt injection from external content, the skill instructions explicitly mandate human confirmation before performing any write actions, which serves as a security control.

app-integrations