clay-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages data ingestion from test fixtures and enrichment payloads. Ingestion points: The skill reads from test fixtures and processes webhook payloads defined in Step 3 and Step 5. Boundary markers: It utilizes structured zod schemas to define clear data boundaries. Capability inventory: The skill uses Bash for connectivity tests (curl) and npm for automated testing. Sanitization: It implements strict schema validation using zod and uses grep to detect and block PII in test fixtures.
- [EXTERNAL_DOWNLOADS]: The skill configures interaction with the well-known service app.clay.com for automated connectivity testing within the GitHub Actions workflow.
Audit Metadata