skills/clawlink-hq/skills/render/Gen Agent Trust Hub

render

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the @useclawlink/cli package from the official NPM registry. This is a vendor-owned resource used for the skill's primary functionality.
  • [COMMAND_EXECUTION]: Uses the npx command to run the vendor's CLI for managing Render services, deployments, and metrics. These operations are within the stated scope of the skill.
  • [CREDENTIALS_UNSAFE]: The skill describes a standard authentication flow where credentials are stored locally at ~/.clawlink/credentials.json. This is standard behavior for CLI-based authentication and does not involve harvesting user secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:43 PM
Security Audit — agent-trust-hub — render