clickmeeting

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed with security in mind, delegating credential management to the Membrane platform. This prevents the need for hardcoded API keys or sensitive local environment variables.\n- [COMMAND_EXECUTION]: The skill involves executing commands via the @membranehq/cli. This tool is used to manage connections and execute actions against the ClickMeeting API through the vendor's infrastructure.\n- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the @membranehq/cli package from the official NPM registry. This is a known vendor resource from the skill's author.\n- [PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it processes external data from ClickMeeting.\n
  • Ingestion points: External data (e.g., conference names, attendee lists) retrieved from ClickMeeting via the membrane CLI in SKILL.md.\n
  • Boundary markers: None identified in the provided instructions.\n
  • Capability inventory: The skill can execute CLI commands using the membrane tool as described in SKILL.md.\n
  • Sanitization: There are no explicit instructions for sanitizing or validating data before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 09:56 AM