pandadoc
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via npx to perform PandaDoc operations through the ClawLink CLI tool. \n- [EXTERNAL_DOWNLOADS]: Downloads the official @useclawlink/cli tool from the npm registry to enable integration features. \n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user natural language to determine PandaDoc actions. \n
- Ingestion points: User instructions passed as arguments to the CLI actions command. \n
- Boundary markers: Absent in the skill instructions. \n
- Capability inventory: Reading and creating documents, templates, and contacts within the connected PandaDoc account. \n
- Sanitization: Relies on the ClawLink CLI for input processing and validation. \n- [SAFE]: Authentication is handled via browser-based OAuth which stores credentials locally, avoiding the use of hardcoded secrets or API keys.
Audit Metadata