sendgrid
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the NPM registry at runtime, which is the official tool for this integration. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the ClawLink CLI to manage SendGrid campaigns, contacts, and templates via shell commands.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by retrieving data from SendGrid that could contain malicious instructions.
- Ingestion points: Data is ingested from SendGrid via actions such as
sendgrid_get_all_contactsandsendgrid_get_all_email_templatesas described inSKILL.md. - Boundary markers: There are no explicit delimiters or protective instructions defined to wrap or isolate external content.
- Capability inventory: The skill enables the agent to execute shell commands using the
@useclawlink/clitool. - Sanitization: No sanitization or content validation procedures are mentioned for the data retrieved from SendGrid.
Audit Metadata