skills/clerk/skills/clerk-cli/Gen Agent Trust Hub

clerk-cli

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard package runners (npx, bunx, pnpm, yarn) to fetch and execute the official clerk CLI binary from the vendor's registry.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of various clerk CLI commands to perform administrative tasks like authentication, project linking, and environment variable management.
  • [CREDENTIALS_UNSAFE]: The skill handles sensitive Clerk API keys (Secret Keys and Platform API Keys) and interacts with the system keychain, which is the intended and documented behavior for a Clerk account management tool.
  • [DATA_EXFILTRATION]: Network operations are restricted to official Clerk API domains (api.clerk.com, api.clerk.dev) and the Svix relay service for webhook testing, representing normal vendor functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 01:15 AM
Security Audit — agent-trust-hub — clerk-cli