typeform
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage directly from the NPM registry. - [COMMAND_EXECUTION]: Employs shell commands to list, create, and manage Typeform resources via the ClawLink service. These commands include
login,connect, andrun, which are standard operations for the tool's intended purpose. - [DATA_EXPOSURE]: Documents the storage of authentication credentials in the user's home directory at
~/.clawlink/credentials.json. This is standard behavior for the CLI tool to maintain sessions and does not involve unauthorized data exfiltration.
Audit Metadata