capsule-crm
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the NPM registry. This package is the official tool provided by the skill's author for interacting with their service. - [COMMAND_EXECUTION]: The instructions direct the agent to run several shell commands using the
npx @useclawlink/clitool to log in, connect to Capsule CRM, and perform data operations. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Data is ingested from Capsule CRM through the
runandactionscommands inSKILL.md. - Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: The skill allows the agent to read and write data to Capsule CRM via the CLI.
- Sanitization: No specific sanitization or filtering of the CRM data is described.
Audit Metadata