clay-reliability-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and enrich external data ('leads' or 'rows'), which serves as an ingestion point for untrusted content. Malicious data could theoretically contain instructions intended to influence the agent's behavior.
- Ingestion points:
leadparameter inenrichOrFallbackandreliableEnrichfunctions (SKILL.md);rowslist insubmit_rowsandprocess_batch(references/implementation-guide.md). - Boundary markers: Absent; no delimiters or explicit instructions are provided to the model to ignore potential injection within the lead data.
- Capability inventory: The skill allows
Write,Edit, andBash(curl:*)operations across its implementation files. - Sanitization: The provided reliability patterns focus on flow control and persistence, without explicit validation or escaping of the lead data content.
- [COMMAND_EXECUTION]: The troubleshooting section in
references/implementation.mdprovides shell commands for network diagnostics and API health checks. - Evidence: Includes
curlfor testing the Clay API and verifying connectivity, anddigfor DNS resolution checks. - [EXTERNAL_DOWNLOADS]: The implementation guides reference standard external libraries and services.
- Evidence: The Node.js implementation uses the
opossumcircuit breaker library, and the Python implementation uses theredisandrequestspackages. The skill interacts with the official API atapi.clay.com, which is a well-known service.
Audit Metadata