skills/clawlink-hq/skills/mural/Gen Agent Trust Hub

mural

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute the @useclawlink/cli package from the NPM registry. This package is an official resource provided by the vendor for Mural integration.
  • [COMMAND_EXECUTION]: Executes shell commands through the ClawLink CLI to perform read and write actions in Mural boards.
  • [PROMPT_INJECTION]: The skill's ability to read data from Mural introduces a surface for indirect prompt injection where malicious content in a whiteboard could attempt to influence agent behavior. Ingestion points: Mural board content retrieved via the CLI tool. Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are present in the skill text. Capability inventory: The skill has the capability to execute shell commands through the vendor's CLI. Sanitization: No specific sanitization or validation of the retrieved data is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:42 PM
Security Audit — agent-trust-hub — mural