cradl-ai
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the npm registry. This is the official command-line interface provided by the vendor (Membrane) to manage integrations. - [COMMAND_EXECUTION]: The skill utilizes shell commands through the
membraneCLI to perform authentication, connect to Cradl AI, and execute actions. These operations are restricted to the functionality provided by the vendor's tool. - [PROMPT_INJECTION]: The skill processes external data retrieved from Cradl AI (such as document analysis and customer feedback). This creates a surface for indirect prompt injection where data from the external service could potentially contain instructions intended to influence the agent's behavior. This is an inherent risk of data-processing integrations and is handled by standard agent guardrails.
Audit Metadata