clickfunnels-classic
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the official NPM registry. This is a legitimate tool provided by the vendor 'membranedev' to manage the integration lifecycle. - [COMMAND_EXECUTION]: The skill utilizes the
membranecommand-line interface to execute actions, manage connections, and handle authentication. These commands are restricted to the functionality provided by the vendor's toolset. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface where user-provided intents and descriptions are interpolated into CLI commands.
- Ingestion points: User-provided strings enter the system via the
--intentand--descriptionarguments inSKILL.md. - Boundary markers: No explicit delimiters or boundary markers are present to wrap these inputs.
- Capability inventory: The skill is capable of executing shell commands via the
membraneCLI and performing network requests through the platform. - Sanitization: No local sanitization is performed on the user-provided strings before they are passed to the CLI.
Audit Metadata