asana
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI (@membranehq/cli) from the official npm registry. This is the vendor's own tool required for the skill's core functionality.
- [COMMAND_EXECUTION]: The instructions involve executing various CLI commands through the
membranetool to handle login, connection management, and data operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Asana, which could contain instructions intended to influence the agent's behavior.
- Ingestion points: Data is fetched from Asana via predefined actions like
list-tasksorget-taskand via raw API requests described in SKILL.md. - Boundary markers: The instructions do not provide specific delimiters or ignore-instructions markers for the agent to use when handling retrieved data.
- Capability inventory: The skill allows the agent to execute shell commands (via the
membraneCLI) and perform write operations to the Asana API. - Sanitization: There are no explicit instructions for sanitizing or validating the content retrieved from external Asana records before processing.
Audit Metadata