shippo
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@useclawlink/clipackage from the official NPM registry. This tool belongs to the skill's vendor and is used for its intended integration purposes. - [CREDENTIALS_UNSAFE]: The skill manages credentials within the
~/.clawlink/directory. This is the documented behavior for the ClawLink CLI and follows standard secret management practices for this platform. - [COMMAND_EXECUTION]: The skill uses
npxto execute commands via the vendor's CLI. These commands are limited to authentication and interacting with the Shippo API. - [DATA_EXPOSURE]: The skill involves reading and writing Shippo data, but only through the authenticated CLI session. The instructions include a best-practice reminder to confirm actions with the user before performing any write operations.
Audit Metadata