clay-known-pitfalls
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit external Clay integrations and table configurations, which creates an attack surface where instructions embedded in the analyzed data could potentially influence agent behavior.
- Ingestion points: The agent reads external project files and Clay table configurations using the Read and Grep tools as described in SKILL.md.
- Boundary markers: The skill does not define specific boundary markers or instructions to ignore commands found within the data being audited.
- Capability inventory: The skill's functionality is limited to reading and searching files (Read, Grep), with no capabilities for arbitrary code execution, file system writes, or network exfiltration, which significantly limits the risk of exploitation.
- Sanitization: There is no explicit sanitization or validation of the input data before it is processed by the agent.
Audit Metadata