Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
@useclawlink/clivianpxto perform various Instagram actions, including retrieving user info, posting media, and managing comments. These commands are integral to the skill's primary function of providing Instagram access to an AI agent. - [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@useclawlink/clitool from the NPM registry usingnpx. This is a standard mechanism for utilizing CLI tools within agent environments. The package name aligns with the author's vendor profile. - [CREDENTIALS_SAFE]: The skill identifies that authentication credentials generated during the browser-based login process are stored locally at
~/.clawlink/credentials.json. This is standard behavior for the ClawLink CLI and does not involve hardcoded secrets or unsafe credential handling instructions.
Audit Metadata