webex
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx @useclawlink/clito download and run the CLI tool from the npm registry. This is the intended mechanism for accessing the ClawLink service. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to log in, connect to Webex, and run actions. These commands are necessary for the skill's functionality as a bridge between the agent and the Webex API.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by reading data from Webex (such as messages or meeting descriptions) that could contain malicious instructions.
- Ingestion points: Data retrieved from Webex via
npx @useclawlink/cli run webexandnpx @useclawlink/cli actions webex. - Boundary markers: None explicitly defined in the skill instructions to separate external data from agent commands.
- Capability inventory: The skill has the capability to perform network requests and manage local credentials through the CLI tool.
- Sanitization: There is no evidence of data sanitization or filtering applied to the content retrieved from Webex before it is processed by the agent.
Audit Metadata