dart
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@useclawlink/clipackage from the npm registry. - [COMMAND_EXECUTION]: Multiple shell commands are executed using the ClawLink CLI to read and write Dart data.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection. 1. Ingestion points: Data and action details are retrieved from Dart using
npx @useclawlink/cli actions dart. 2. Boundary markers: No delimiters or specific ignore instructions are used to separate external data from agent instructions. 3. Capability inventory: The skill can execute write actions in Dart vianpx @useclawlink/cli run dart. 4. Sanitization: No sanitization of external Dart content is performed before processing.
Audit Metadata