zoho-invoice
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@useclawlink/clipackage from the NPM registry. This is a standard distribution method for the tool provided by the author, clawlink-hq. - [COMMAND_EXECUTION]: Shell commands are used to invoke the ClawLink CLI for authentication and Zoho Invoice management. These commands (
login,connect,run) are part of the intended functionality and are explicitly documented. - [SAFE]: Authentication credentials for the service are stored locally in the user's home directory (
~/.clawlink/credentials.json), which is standard behavior for this CLI tool. No sensitive data exfiltration or unauthorized file access was detected.
Audit Metadata