bitwarden
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the npm registry. This is a legitimate tool provided by the skill's vendor.\n- [COMMAND_EXECUTION]: The skill uses shell commands via the membrane CLI to perform login, manage connections, and execute actions against the Bitwarden API.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Bitwarden vault items, which represents a potential attack surface for indirect prompt injection.\n
- Ingestion points: Data is retrieved from Bitwarden via
membrane action runandmembrane requestin SKILL.md.\n - Boundary markers: The instructions do not specify the use of delimiters or ignore instructions when processing retrieved data.\n
- Capability inventory: The skill possesses the ability to execute shell commands and make network requests through the Membrane CLI (SKILL.md).\n
- Sanitization: No explicit sanitization or validation of the retrieved vault content is described.
Audit Metadata