skills/clay-run/agent-plugins/onboard/Gen Agent Trust Hub

onboard

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the clay CLI tool to perform actions such as clay whoami, clay onboard options, and clay onboard select. These commands are used to check the user's onboarding status and retrieve configuration data from the vendor's services.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data (labels, descriptions, and instructions) fetched dynamically from the clay CLI. This data is used to present options to the user and guide the agent's next steps.
  • Ingestion points: Output from clay onboard options and clay onboard select in SKILL.md.
  • Boundary markers: None identified; instructions are followed as if provided directly by the user.
  • Capability inventory: The skill has access to the Bash and Read tools, enabling file access and shell command execution.
  • Sanitization: No explicit sanitization or validation of the fetched instructions is described.
  • [DYNAMIC_EXECUTION]: The skill dynamically follows natural language instructions returned by the clay onboard select command to perform specific tasks. This behavior is tied to the skill's primary purpose of providing an interactive onboarding experience.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 11:02 PM