tables-cli
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
clayCLI tool to perform operations like listing workbooks, querying tables, and fetching column information. These commands are standard for a data integration and enrichment platform. - [INDIRECT_PROMPT_INJECTION]: The skill processes table data fetched from an external source (Clay's API). While this data could theoretically contain malicious instructions, the skill uses structured processing with
jqand clearly defined CLI flags to manage the information, which minimizes the risk of the agent executing unintended instructions found within the data. - Ingestion points: Data enters via
clay tables list,clay tables rows,clay tables get, andclay tables querycommands as seen inSKILL.md. - Boundary markers: None explicitly defined in the prompts, but commands return structured JSON data.
- Capability inventory: Uses the
clayCLI for network reads and uses an external Write tool for local file creation (noted in the CSV export section). - Sanitization: The skill uses
jqfilters to extract specific fields and tokens, effectively selecting only the data needed for analysis.
Audit Metadata