quickbooks
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via the
@useclawlink/clitool to perform actions such as creating customers, invoices, and bills in QuickBooks. - [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@useclawlink/clipackage from the NPM registry usingnpxfor both setup and operational tasks. - [CREDENTIALS_UNSAFE]: The skill documentation notes that credentials obtained via the browser-based login are stored locally in the user's home directory at
~/.clawlink/credentials.json. This is standard behavior for this CLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from QuickBooks accounts. While this presents a potential surface for indirect prompt injection if external data contains malicious instructions, the skill specifies that the agent should confirm with the user before performing any write operations, providing a human-in-the-loop safety checkpoint.
Audit Metadata