clay-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs routine software maintenance tasks, such as version checking and dependency updates, which are consistent with its stated purpose.
  • [COMMAND_EXECUTION]: Employs restricted bash tools for 'npm' and 'git' operations. These are used safely for package installation and repository management.
  • [EXTERNAL_DOWNLOADS]: References official and well-known documentation sources, including GitHub and the official clay.com documentation domain.
  • [PROMPT_INJECTION]: The skill's primary function is to read and edit project files during migration, which represents an ingestion surface for indirect prompt injection; however, no evidence of exploitation or malicious intent was found within the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 06:22 PM