openai
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the NPM registry, which is a well-known service. - [COMMAND_EXECUTION]: Several commands are executed via the ClawLink CLI, including
login,connect,actions, andrun, to interact with OpenAI's API through the vendor's hosted setup. - [CREDENTIALS_UNSAFE]: The skill documents that credentials obtained during the login process are stored locally at
~/.clawlink/credentials.json. This is standard practice for CLI-based authentication and does not involve hardcoded secrets in the skill itself.
Audit Metadata