shippo
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx @useclawlink/cli, which fetches and executes the ClawLink CLI tool from the public NPM registry at runtime. - [COMMAND_EXECUTION]: The instructions direct the agent to run various shell commands using the ClawLink CLI to interact with the Shippo service, including authentication and fulfillment tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from Shippo, which may include user-controlled or third-party fields that the agent interprets.
- Ingestion points: Data is ingested through actions defined in
SKILL.mdthat query the Shippo API via the CLI. - Boundary markers: The instructions do not define specific delimiters or security headers to separate untrusted Shippo data from system instructions.
- Capability inventory: The CLI tool performs network operations to Shippo and accesses local credentials stored in
~/.clawlink/credentials.json. - Sanitization: There is no evidence of data sanitization or structural validation performed on the retrieved Shippo content before it is processed by the agent.
Audit Metadata