skills/clawlink-hq/skills/intercom/Gen Agent Trust Hub

intercom

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes npx @useclawlink/cli to perform administrative and data operations in Intercom. This is the intended functionality for the integration.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the @useclawlink/cli package from the official npm registry during execution. This package is the official tool provided by the vendor for this integration.
  • [CREDENTIALS_UNSAFE]: The skill documents that authentication credentials for the ClawLink service are stored locally in the user's home directory at ~/.clawlink/credentials.json. This is standard practice for CLI-based authentication and is transparently disclosed.
  • [DATA_EXPOSURE]: As an integration skill, it ingests data from Intercom (such as conversations and contact details). This represents an attack surface for indirect prompt injection if external data contains malicious instructions, though this is a standard risk for any communication-based integration tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:43 PM
Security Audit — agent-trust-hub — intercom