zoho-desk
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and run the @useclawlink/cli package from the official npm registry.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to perform authentication and Zoho Desk data operations using shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Zoho Desk, which could contain instructions from external users intended to influence agent behavior.
- Ingestion points: Customer tickets, comments, and knowledge base content retrieved via Zoho Desk actions.
- Boundary markers: None specified in the instructions.
- Capability inventory: CLI interaction with the Zoho Desk API and local file system access for credentials.
- Sanitization: The instructions do not define specific sanitization or filtering for the retrieved data.
Audit Metadata