skills/clawlink-hq/skills/basecamp/Gen Agent Trust Hub

basecamp

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @useclawlink/cli package from the NPM registry. This package is the official CLI tool for the ClawLink service, which is the vendor of this skill.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution via the ClawLink CLI to perform actions such as logging in, connecting to Basecamp, and managing project tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from Basecamp which serves as an external, untrusted source of information. Ingestion points: Data is read from Basecamp project items via CLI commands. Boundary markers: The skill instructs to 'confirm with the user before any write.' Capability inventory: Capability to read and update data in Basecamp through the CLI tools. Sanitization: Relies on human-in-the-loop review for write operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:45 PM