semrush
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the npm registry, which is the official tool provided by the vendor for this integration. - [COMMAND_EXECUTION]: It relies on executing shell commands to interact with the ClawLink CLI for listing available Semrush actions and running data queries.
- [DATA_EXPOSURE]: Authentication credentials provided by the user via the browser-based login are stored locally at
~/.clawlink/credentials.json, which is standard behavior for CLI-based authentication tools.
Audit Metadata