aerisweather
Warn
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a global Node.js package (
@membranehq/cli@latest) from the NPM registry to enable its functionality. - [COMMAND_EXECUTION]: The skill relies extensively on executing shell commands via the
membraneCLI tool, including logging in, connecting to services, and running actions. - [COMMAND_EXECUTION]: The
membrane action createcommand implements dynamic execution by generating and building new code logic (actions) at runtime based on natural language descriptions. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external weather data from the AerisWeather API and takes user-provided descriptions to generate executable actions.
- Ingestion points: Weather data from AerisWeather APIs; intent strings in
membrane action list; and descriptions inmembrane action create(SKILL.md). - Boundary markers: The skill suggests using the
--jsonflag to enforce structured data boundaries for machine readability. - Capability inventory: Subprocess execution of the
membraneCLI and network operations via API connectors (SKILL.md). - Sanitization: The skill delegates authentication and connection management to the Membrane platform but does not explicitly define sanitization for the content of generated actions.
Audit Metadata