Security audit
Security checks for vulnerabilities and agentic risk
ClawLink is a disclosed third-party integration plugin that can read from and act in connected apps, with the expected credential storage and safety guidance for that purpose.
Install only if you are comfortable letting ClawLink mediate access to the external apps you connect. Review connected app scopes in the ClawLink dashboard, use previews for write actions, and be especially careful with email sending, public posting, CRM changes, payments, or deletions.
The skill description is broad enough to activate for many common requests involving Gmail, Slack, calendars, docs, and other external apps. Over-broad activation increases the chance the agent will invoke a high-privilege integration path unnecessarily, expanding access to connected third-party data and actions beyond what is minimally needed.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Use this skill when the user asks you to read from or act in an external app or service, such as Notion, Gmail, Outlook, ClickUp, Google Calendar, Apollo, or OneDrive. Use it only for that request. Do not call ClawLink for requests that do not involve an external app.
When the app is connected to ClawLink, use the ClawLink tools below instead of browser workarounds, and do not ask the user for separate per-app credentials.
## After pairing
No suspicious patterns detected.