chift
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI tool to interact with the Chift API, manage connections, and execute integration workflows as described inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from npm. This is a vendor-owned resource required for the skill's core functionality. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes data from external API responses. Ingestion points: Data retrieved from Chift via
membrane action runandmembrane requestcommands inSKILL.md. Boundary markers: No explicit instructions for the agent to ignore instructions embedded in the retrieved data are provided. Capability inventory: The skill allows the execution of shell commands through themembraneCLI. Sanitization: No evidence of data sanitization or validation is present in the skill instructions.
Audit Metadata