clay-policy-guardrails

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes bash and npx for executing linting tools, secret scanning, and configuration validation. Commands like grep are used in pre-commit hooks and CI/CD workflows to detect hardcoded secrets, which is consistent with the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: The skill references established development tools such as eslint and ajv via npx, along with the official actions/checkout GitHub Action. these are well-known and trusted resources within the software development ecosystem.
  • [SAFE]: The skill includes regular expression patterns designed to identify Clay API keys to prevent them from being committed to version control. These patterns are used for security enforcement and do not contain actual sensitive credentials or malicious instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 01:31 AM