freshdesk
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@useclawlink/clipackage from the public NPM registry usingnpx. This is the primary method for interacting with the service. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage authentication and Freshdesk data. It notes that credentials for the service are stored locally at
~/.clawlink/credentials.jsonafter the login process. - [REMOTE_CODE_EXECUTION]: The use of
npxto run a remote package from NPM constitutes a form of remote code execution. This behavior is documented as a core part of the skill's setup and operation using the vendor's official CLI tool. - [PROMPT_INJECTION]: The skill acts as a bridge for processing external data from Freshdesk, including ticket notes and contact information. This creates an indirect prompt injection surface where instructions embedded in support tickets or customer data could potentially influence the agent's behavior.
- Ingestion points: Freshdesk ticket content, notes, contacts, and company data.
- Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: Subprocess execution via
npx @useclawlink/clifor reading and writing data. - Sanitization: Not specified; the skill relies on the agent's internal safety filters.
Audit Metadata