The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @useclawlink/cli package from the npm registry. This is a vendor-specific tool used for authentication and managing connections between the agent and external services.
[COMMAND_EXECUTION]: The skill relies on executing shell commands (via npx @useclawlink/cli) to interact with GitHub. These commands allow the agent to perform various actions such as repository management, issue tracking, and user membership updates.
[DATA_EXPOSURE]: The documentation notes that credentials for the service are stored locally in the user's home directory at ~/.clawlink/credentials.json. This is standard behavior for the associated CLI tool's session management.
[INDIRECT_PROMPT_INJECTION]: The skill has the capability to read data from GitHub (e.g., issue descriptions or repository data), which represents a potential ingestion point for untrusted content. However, the skill explicitly instructs the agent to read first and confirm with the user before performing any write operations.

github