clerk-cli
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard package runners (npx, bunx, pnpm, yarn) to fetch and execute the official
clerkCLI binary from the vendor's registry. - [COMMAND_EXECUTION]: The skill facilitates the execution of various
clerkCLI commands to perform administrative tasks like authentication, project linking, and environment variable management. - [CREDENTIALS_UNSAFE]: The skill handles sensitive Clerk API keys (Secret Keys and Platform API Keys) and interacts with the system keychain, which is the intended and documented behavior for a Clerk account management tool.
- [DATA_EXFILTRATION]: Network operations are restricted to official Clerk API domains (
api.clerk.com,api.clerk.dev) and the Svix relay service for webhook testing, representing normal vendor functionality.
Audit Metadata