asana

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI (@membranehq/cli) from the official npm registry. This is the vendor's own tool required for the skill's core functionality.
  • [COMMAND_EXECUTION]: The instructions involve executing various CLI commands through the membrane tool to handle login, connection management, and data operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Asana, which could contain instructions intended to influence the agent's behavior.
  • Ingestion points: Data is fetched from Asana via predefined actions like list-tasks or get-task and via raw API requests described in SKILL.md.
  • Boundary markers: The instructions do not provide specific delimiters or ignore-instructions markers for the agent to use when handling retrieved data.
  • Capability inventory: The skill allows the agent to execute shell commands (via the membrane CLI) and perform write operations to the Asana API.
  • Sanitization: There are no explicit instructions for sanitizing or validating the content retrieved from external Asana records before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 12:09 PM
Security Audit — agent-trust-hub — asana