clay-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for communicating with Clay.com, a recognized SaaS platform for data enrichment.
- [DATA_EXPOSURE_EXFILTRATION]: The skill uses best practices for handling sensitive URLs by referencing environment variables (e.g.,
CLAY_WEBHOOK_URL) rather than hardcoding credentials. - [INDIRECT_PROMPT_INJECTION]: While the skill templates ingest user-provided data (lead information, domains), they do so using standard JSON serialization which limits the risk of command injection within the webhook payload.
- [COMMAND_EXECUTION]: The use of
curlin instructions is strictly for interacting with the specified Clay API endpoints and does not include risky patterns such as piping remote content to a shell.
Audit Metadata