kit
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
@useclawlink/clitool via shell commands to manage Kit resources and perform account actions. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@useclawlink/clipackage from the npm registry, which is the official tool provided by the vendor. - [CREDENTIALS_UNSAFE]: The documentation identifies that authentication credentials for the service are stored locally in the user's home directory at
~/.clawlink/credentials.jsonfollowing the login process. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing data retrieved from the external Kit API.
- Ingestion points: External data fetched through actions such as
kit_get_subscriberandkit_list_broadcastsinSKILL.md. - Boundary markers: Absent; there are no explicit delimiters to separate external data from agent instructions.
- Capability inventory: Shell command execution capabilities via
npxare present across the skill. - Sanitization: No specific sanitization or filtering of the Kit data is described in the skill instructions.
Audit Metadata