appbaseio

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the NPM registry.
  • Evidence: npm install -g @membranehq/cli@latest in SKILL.md.
  • Note: This is a vendor-provided tool from the author (membranedev).
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform operations such as authentication, connection management, and executing API actions.
  • Evidence: membrane login, membrane connection ensure, and membrane action run commands used throughout SKILL.md.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from external Appbase.io API endpoints.
  • Ingestion points: Data returned from membrane action run and membrane request commands (SKILL.md).
  • Boundary markers: No delimiters or specific instructions to ignore embedded commands are present in the prompt templates.
  • Capability inventory: The agent can execute CLI commands and proxy requests via the Membrane CLI (SKILL.md).
  • Sanitization: No explicit validation or filtering of the external API content is defined before the data is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 08:18 PM
Security Audit — agent-trust-hub — appbaseio