dialpad
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the NPM registry. - [COMMAND_EXECUTION]: The skill relies on shell command execution to perform authentication and execute actions in Dialpad via the ClawLink CLI.
- [PROMPT_INJECTION]: The skill processes data from Dialpad, which represents a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context through the output of
npx @useclawlink/cli run dialpadwhen reading messages or logs. - Boundary markers: None present in the instructions to separate external data from system instructions.
- Capability inventory: The skill can execute various Dialpad actions and run shell commands through the CLI.
- Sanitization: No explicit sanitization or validation of external Dialpad content is performed before processing.
Audit Metadata