appbaseio
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the NPM registry. - Evidence:
npm install -g @membranehq/cli@latestin SKILL.md. - Note: This is a vendor-provided tool from the author (membranedev).
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations such as authentication, connection management, and executing API actions. - Evidence:
membrane login,membrane connection ensure, andmembrane action runcommands used throughout SKILL.md. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from external Appbase.io API endpoints.
- Ingestion points: Data returned from
membrane action runandmembrane requestcommands (SKILL.md). - Boundary markers: No delimiters or specific instructions to ignore embedded commands are present in the prompt templates.
- Capability inventory: The agent can execute CLI commands and proxy requests via the Membrane CLI (SKILL.md).
- Sanitization: No explicit validation or filtering of the external API content is defined before the data is processed by the agent.
Audit Metadata