mural
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@useclawlink/clipackage from the NPM registry. This package is an official resource provided by the vendor for Mural integration. - [COMMAND_EXECUTION]: Executes shell commands through the ClawLink CLI to perform read and write actions in Mural boards.
- [PROMPT_INJECTION]: The skill's ability to read data from Mural introduces a surface for indirect prompt injection where malicious content in a whiteboard could attempt to influence agent behavior. Ingestion points: Mural board content retrieved via the CLI tool. Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are present in the skill text. Capability inventory: The skill has the capability to execute shell commands through the vendor's CLI. Sanitization: No specific sanitization or validation of the retrieved data is mentioned.
Audit Metadata