zoho-invoice

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute the @useclawlink/cli package from the NPM registry. This is a standard distribution method for the tool provided by the author, clawlink-hq.
  • [COMMAND_EXECUTION]: Shell commands are used to invoke the ClawLink CLI for authentication and Zoho Invoice management. These commands (login, connect, run) are part of the intended functionality and are explicitly documented.
  • [SAFE]: Authentication credentials for the service are stored locally in the user's home directory (~/.clawlink/credentials.json), which is standard behavior for this CLI tool. No sensitive data exfiltration or unauthorized file access was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:43 PM
Security Audit — agent-trust-hub — zoho-invoice