phantombuster
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute the@useclawlink/clipackage. This is the official command-line tool provided by the vendor for managing PhantomBuster integrations. - [COMMAND_EXECUTION]: Interacts with PhantomBuster by executing shell commands. The instructions recommend a security best practice by advising the agent to describe actions and verify inputs with the user before performing any write operations.
- [PROMPT_INJECTION]: The skill provides the capability to read external data from PhantomBuster, which represents a surface for indirect prompt injection.
- Ingestion points: Data is ingested through actions like
phantombuster_get_agent_outputandphantombuster_get_leads_by_listdocumented in SKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded commands within the fetched data.
- Capability inventory: The skill utilizes shell command execution via the ClawLink CLI to interact with the service.
- Sanitization: No specific filtering or sanitization of the external content is described before it is processed by the agent.
- [SAFE]: The storage of authentication tokens in
~/.clawlink/credentials.jsonfollowing thelogincommand is a standard and documented practice for this CLI tool's credential management.
Audit Metadata