clickmeeting
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed with security in mind, delegating credential management to the Membrane platform. This prevents the need for hardcoded API keys or sensitive local environment variables.\n- [COMMAND_EXECUTION]: The skill involves executing commands via the
@membranehq/cli. This tool is used to manage connections and execute actions against the ClickMeeting API through the vendor's infrastructure.\n- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the@membranehq/clipackage from the official NPM registry. This is a known vendor resource from the skill's author.\n- [PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it processes external data from ClickMeeting.\n - Ingestion points: External data (e.g., conference names, attendee lists) retrieved from ClickMeeting via the
membraneCLI in SKILL.md.\n - Boundary markers: None identified in the provided instructions.\n
- Capability inventory: The skill can execute CLI commands using the
membranetool as described in SKILL.md.\n - Sanitization: There are no explicit instructions for sanitizing or validating data before processing it.
Audit Metadata