clerk-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several shell commands for diagnosing authentication issues, including interactions with Clerk's official status and management APIs.
- [REMOTE_CODE_EXECUTION]: Diagnostic scripts in
SKILL.mdpipe the output ofcurlrequests topython3. Analysis confirms these pipes usepython3 -cwith hardcoded inline scripts orpython3 -m json.toolspecifically for JSON parsing and formatting. The data source (status.clerk.com) is a well-known service provider, and the execution logic is defined locally within the skill instructions. - [PRIVILEGE_ESCALATION]: The runbook describes an 'Emergency Auth Bypass' procedure that allows all requests by setting a specific environment variable. This is presented as a last-resort disaster recovery measure for total authentication service outages and includes instructions for logging and eventual removal.
- [CREDENTIALS_UNSAFE]: Diagnostic scripts reference the use of
${CLERK_SECRET_KEY}for API authentication tests. The skill follows best practices by using environment variable references rather than hardcoding secrets.
Audit Metadata