clerk-backend-api
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches OpenAPI specifications from the official Clerk GitHub repository (github.com/clerk/openapi-specs). These downloads provide the necessary data for browsing and describing the API endpoints.
- [COMMAND_EXECUTION]: Uses local shell and Node.js scripts (e.g., scripts/extract-tags.js, scripts/execute-request.sh) to parse the downloaded specifications and execute API requests. The scripts process data from the vendor's trusted repository.
- [DATA_EXFILTRATION]: Performs authenticated requests to the official Clerk API (api.clerk.com) using the user-provided CLERK_SECRET_KEY. The skill includes a scope enforcement mechanism to prevent accidental write operations without specific authorization.
Audit Metadata