bizimply

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the NPM registry. This is the official command-line interface provided by the vendor (Membrane) and is a trusted component of the skill's infrastructure.
  • [COMMAND_EXECUTION]: Instructions guide the user through running membrane CLI commands for authentication, connection management, and action execution. These commands are standard operations for interacting with the Membrane platform and do not involve arbitrary shell injection.
  • [DATA_EXFILTRATION]: Network operations are directed towards the vendor's official domains and the Bizimply API. The skill utilizes a managed authentication system that avoids handling or storing raw credentials locally.
  • [INDIRECT_PROMPT_INJECTION]: This skill possesses an ingestion surface for external data from the Bizimply platform.
  • Ingestion points: Data retrieved from Bizimply via membrane action run (documented in SKILL.md).
  • Boundary markers: Not explicitly defined in these general instructions.
  • Capability inventory: Subprocess execution for the membrane CLI (documented in SKILL.md).
  • Sanitization: Relies on the Membrane platform's managed action environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 08:41 PM
Security Audit — agent-trust-hub — bizimply