omnisend
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npxto download and execute the@useclawlink/clitool from the NPM registry. - [COMMAND_EXECUTION]: The skill relies on shell command execution to interact with Omnisend services via the ClawLink CLI.
- [REMOTE_CODE_EXECUTION]: By using
npx, the skill executes code from a remote registry at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Omnisend (such as contact details, campaign content, and product descriptions), creating a surface for indirect prompt injection if the external data contains malicious instructions.
- Ingestion points: Data retrieved from Omnisend via actions like
omnisend_list_campaignsandomnisend_get_contactin SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The skill utilizes shell command execution and network access facilitated by the CLI.
- Sanitization: There is no evidence of sanitization or validation for the data ingested from the Omnisend API.
Audit Metadata