skills/clawlink-hq/skills/kit/Gen Agent Trust Hub

kit

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the @useclawlink/cli tool via shell commands to manage Kit resources and perform account actions.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute the @useclawlink/cli package from the npm registry, which is the official tool provided by the vendor.
  • [CREDENTIALS_UNSAFE]: The documentation identifies that authentication credentials for the service are stored locally in the user's home directory at ~/.clawlink/credentials.json following the login process.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing data retrieved from the external Kit API.
  • Ingestion points: External data fetched through actions such as kit_get_subscriber and kit_list_broadcasts in SKILL.md.
  • Boundary markers: Absent; there are no explicit delimiters to separate external data from agent instructions.
  • Capability inventory: Shell command execution capabilities via npx are present across the skill.
  • Sanitization: No specific sanitization or filtering of the Kit data is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:42 PM
Security Audit — agent-trust-hub — kit