clay-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from environment variables, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Accesses environment variables such as
process.env.NODE_ENVandCLAY_WEBHOOK_URLwithin the configuration logic inSKILL.mdandreferences/implementation-guide.md.\n - Boundary markers: No explicit delimiters are used to isolate configuration inputs from the agent instruction context.\n
- Capability inventory: The skill supports network operations through the
Bashtool usingcurl.\n - Sanitization: Implements strict schema validation using the Zod library to ensure configuration integrity and filter malformed inputs.\n- [DATA_EXFILTRATION]: Describes diagnostic procedures that transmit authentication tokens to external service endpoints.\n
- Evidence: Documentation in
references/implementation.mdprovides shell commands utilizingcurlto transmit theCLAY_API_KEYto the officialapi.clay.comendpoint.\n - Context: The network operations target the official API of a well-known service as part of standard setup verification.\n- [COMMAND_EXECUTION]: Provides guidance on executing shell commands for secret management on cloud platforms.\n
- Evidence: Contains examples for using the GitHub CLI, AWS CLI, and Google Cloud SDK to store and manage per-environment secrets.
Audit Metadata