cisco-appdynamics
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the NPM registry. This tool is provided by the vendor to facilitate authentication and interaction with the Membrane platform. - [PROMPT_INJECTION]: The skill processes external data from Cisco AppDynamics, such as metric data, events, and reports. This ingestion point represents an indirect prompt injection surface if the external data contains instructions intended to influence the agent's behavior.
- Ingestion points: Data returned from
membrane action run(Cisco AppDynamics events, metrics, reports). - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill uses the
membraneCLI to execute actions and can create new actions dynamically. It has the capability to write to and read from the connected application. - Sanitization: No explicit sanitization or validation of external content is described before the data is processed by the agent.
Audit Metadata