intercom
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx @useclawlink/clito perform administrative and data operations in Intercom. This is the intended functionality for the integration. - [EXTERNAL_DOWNLOADS]: The skill fetches the
@useclawlink/clipackage from the official npm registry during execution. This package is the official tool provided by the vendor for this integration. - [CREDENTIALS_UNSAFE]: The skill documents that authentication credentials for the ClawLink service are stored locally in the user's home directory at
~/.clawlink/credentials.json. This is standard practice for CLI-based authentication and is transparently disclosed. - [DATA_EXPOSURE]: As an integration skill, it ingests data from Intercom (such as conversations and contact details). This represents an attack surface for indirect prompt injection if external data contains malicious instructions, though this is a standard risk for any communication-based integration tool.
Audit Metadata