appfire
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
@membranehq/clitool from the NPM registry. This is a vendor-controlled package used for interacting with the Membrane platform. - [COMMAND_EXECUTION]: The skill uses shell commands via the
membraneCLI to perform login, connect to services, and execute actions. - [REMOTE_CODE_EXECUTION]: The skill utilizes
membrane action createto dynamically generate integration logic on the vendor's platform based on natural language descriptions, which are then executed. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface. Ingestion points: External data is processed via the
--inputargument in themembrane action runcommand inSKILL.md. Boundary markers: The skill documentation does not specify the use of delimiters or warnings to ignore instructions within the processed data. Capability inventory: The CLI tool allows for network communication and data manipulation across connected services. Sanitization: There is no evidence of local sanitization of the input data before it is passed to the CLI.
Audit Metadata