clockify
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally via NPM. This is a legitimate tool provided by the vendor to facilitate the integration. - [COMMAND_EXECUTION]: The instructions utilize the Membrane CLI to perform various operations, including authentication, connection management, and running API actions. All commands are standard for this integration's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the Clockify API, which presents a potential surface for indirect prompt injection if the external data contains malicious instructions.
- Ingestion points: Data is received through
membrane action runandmembrane requestcommands which fetch user, project, and time entry data. - Boundary markers: The provided instructions do not specify explicit boundary markers for the data processed by the agent.
- Capability inventory: The skill has the capability to execute shell commands via the Membrane CLI, though these are scoped to the Membrane environment.
- Sanitization: There is no explicit mention of data sanitization or validation logic within the skill body.
Audit Metadata