quickbooks
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively utilizes the vendor-owned CLI package
@useclawlink/cliand official domains (claw-link.dev) for QuickBooks integration. - [SAFE]: Authentication is managed through a browser-based OAuth process (
npx @useclawlink/cli login), which is a secure alternative to hardcoding API keys or secrets. - [SAFE]: Local credential storage is restricted to a vendor-defined path (
~/.clawlink/credentials.json), following standard CLI configuration practices. - [INDIRECT_PROMPT_INJECTION]: The skill interpolates natural language queries into shell commands to identify QuickBooks actions.
- Ingestion points: User-provided strings in
npx @useclawlink/cli actions quickbooks "<what you want to do>"(SKILL.md). - Boundary markers: Commands use standard shell quoting to delimit user input.
- Capability inventory: Limited to read/write actions on the user's QuickBooks account via the authenticated CLI.
- Sanitization: The skill relies on the vendor CLI to parse and validate mapped action IDs before execution.
Audit Metadata