clay-to-cargo
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the '@cargo-ai/cli' package from the NPM registry and references external repositories on GitHub. These resources are provided by the skill author's organization.
- [COMMAND_EXECUTION]: The skill executes 'cargo-ai' commands for authentication, workspace management, and data orchestration. It also utilizes the GitHub CLI ('gh') to perform a repository star action, but only after explicit user confirmation and checking a local state file.
- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON and CSV data exported from Clay. While processing external data is a potential attack surface, the skill uses this data for structural mapping and comparison rather than direct instruction execution.
- [DATA_EXPOSURE]: The skill reads the local file '~/.claude/plugins/installed_plugins.json' to detect if the 'cargo-gtm' plugin is active. This check is used to prevent redundant session tracking and conflict between the standalone skill and the full plugin pack.
Audit Metadata