freshbooks
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch the @useclawlink/cli package from the NPM registry, which is a well-known service.
- [COMMAND_EXECUTION]: The skill performs business operations by executing the @useclawlink/cli tool via shell commands.
- [INDIRECT_PROMPT_INJECTION]: Data retrieved from FreshBooks, such as client records or project details, is ingested into the agent context. 1. Ingestion points: Results from actions like freshbooks_list_clients or freshbooks_list_projects in SKILL.md. 2. Boundary markers: The skill does not define specific delimiters to isolate external data from instructions. 3. Capability inventory: The skill utilizes shell command execution via the npx tool. 4. Sanitization: There is no evidence of data sanitization or validation before processing external content.
Audit Metadata