attio
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@useclawlink/clipackage from the NPM registry. This is a standard vendor-provided utility necessary for the integration's functionality. - [COMMAND_EXECUTION]: Performs CRM actions by executing CLI commands. The instructions correctly direct the agent to 'read first' and 'confirm with the user before any write', which mitigates the risk of unintended data modifications.
- [CREDENTIALS_UNSAFE]: Authentication is handled through an OAuth-style flow that stores the resulting credentials in a local configuration file (
~/.clawlink/credentials.json). This approach avoids the need for hardcoded API keys and follows best practices for CLI-based service integrations.
Audit Metadata