hunter
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the @useclawlink/cli tool to perform domain searches, email finding, and lead creation actions.
- [EXTERNAL_DOWNLOADS]: The agent is directed to download and execute the @useclawlink/cli package from the NPM registry via npx. This tool is owned by the skill's authoring organization.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the external Hunter API, which constitutes an indirect injection surface. * Ingestion points: The agent receives data from commands like hunter_domain_search and hunter_company_enrichment. * Capability inventory: The skill uses shell command execution to perform its primary functions. * Boundary markers: The documentation explicitly instructs the agent to read data first and obtain user confirmation before performing write operations. * Sanitization: Data integrity is managed by the vendor's CLI tool and the agent's internal filtering systems.
Audit Metadata