clay-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [TRUSTED_VENDOR]: The skill is authored by Jeremy Longshore, a recognized trusted developer of AI agent skills. References to vendor-owned resources (e.g., intentsolutions.io) are documented as safe.
- [EXTERNAL_DOWNLOADS]: The skill specifies dependencies on official platform resources, such as
@clay/sdkvia npm and documentation links toclay.com. These are well-known services and do not pose a security risk. - [COMMAND_EXECUTION]: Provides standard devops and migration commands including
npm install,nodeexecution, andkubectlfor deployment management. These are consistent with the skill's stated purpose of facilitating technical migrations. - [DATA_EXPOSURE]: Includes instructions for handling API keys using environmental variables (
.env) rather than hardcoding them, which is a recommended security practice. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data fields (e.g., job titles, revenues), it does so within a structured mapping and transformation workflow with low risk of executing arbitrary instructions from that data.
Audit Metadata