clari-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides template code for a Clari API client. It follows standard security practices by using environment variables for authentication tokens (e.g., os.environ["CLARI_API_KEY"]) and communicating with the official Clari API domain (api.clari.com). No malicious patterns or security risks were identified.
- [SAFE]: The skill identifies a data ingestion surface where export results are downloaded from Clari's API. This is a standard pattern for the service and does not pose a security risk given the well-known nature of the provider.
- Ingestion points: ClariClient.download_export (Python) and ClariClient.exportAndDownload (TypeScript) in SKILL.md.
- Boundary markers: Not present in template code.
- Capability inventory: Uses requests.get (Python) and fetch (TypeScript) to retrieve data.
- Sanitization: Standard JSON parsing of API responses.
Audit Metadata