clipno
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
clipnoCLI to perform its primary link saving and data extraction functions. - [EXTERNAL_DOWNLOADS]: The skill recommends using
npx -y clipno@latest, which downloads and runs the CLI tool from the public npm registry. - [DATA_EXFILTRATION]: User-provided URLs and extracted content are sent to the
clipno.appservice for processing and storage in Notion. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it parses content from external websites that are then interpreted by the agent.
- Ingestion points: External web content is retrieved from any URL via the
clipno extractcommand. - Boundary markers: No specific instructions or delimiters are used to separate fetched content from system instructions.
- Capability inventory: The agent can execute shell commands via the CLI tool.
- Sanitization: The skill does not mention any sanitization or validation of the content extracted from third-party URLs.
Audit Metadata