skills/clawlink-hq/skills/zyte-api/Gen Agent Trust Hub

zyte-api

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on the @useclawlink/cli tool to perform all operations, including authentication and Zyte API interactions. This is standard behavior for tools provided by the author.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the @useclawlink/cli package from the NPM registry. This package is provided by the skill author.
  • [INDIRECT_PROMPT_INJECTION]: The skill scrapes web data via Zyte API, exposing the agent to potentially malicious instructions in external content. 1. Ingestion points: Scraped data from zyte_api_extract_zyte_api in SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: CLI execution via the ClawLink tool as described in SKILL.md. 4. Sanitization: None mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:46 PM