mailerlite
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates MailerLite operations through the
@useclawlink/cliNode.js package, executed vianpx. This is used to perform account management and marketing actions.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external MailerLite data, creating a surface for indirect prompt injection.\n - Ingestion points: The agent reads subscriber information, account stats, and campaign data from MailerLite via the CLI.\n
- Boundary markers: None present in the skill instructions.\n
- Capability inventory: The skill utilizes shell command execution via
npx.\n - Sanitization: No specific sanitization of external data is defined, relying on the agent's internal safety mechanisms.
Audit Metadata