skills/clawlink-hq/skills/exist/Gen Agent Trust Hub

exist

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the @useclawlink/cli package from the NPM registry. This is the official command-line interface provided by the vendor.
  • [DATA_EXPOSURE]: The CLI tool manages credentials by storing them in a local file at ~/.clawlink/credentials.json. This is standard configuration management for the authentication flow described.
  • [COMMAND_EXECUTION]: Shell commands are used to invoke the ClawLink CLI for logging in, connecting services, and executing actions on the Exist platform.
  • [DATA_EXFILTRATION]: The skill performs network operations to the vendor's domain (claw-link.dev) to manage API requests and OAuth tokens. This behavior is consistent with the skill's stated purpose of providing a hosted integration setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:42 PM
Security Audit — agent-trust-hub — exist