skills/membranedev/application-skills/deno-a-secure-runtime-for-javascript-and-typescript/Gen Agent Trust Hub
deno-a-secure-runtime-for-javascript-and-typescript
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Membrane CLI from the npm registry using
npm install -g @membranehq/cli@latest. This is a verified vendor resource for the Membrane platform. - [COMMAND_EXECUTION]: The skill utilizes the
membranecommand-line tool for authentication, connection management, and executing actions within the Deno environment. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) because it processes data returned from external connections and actions.
- Ingestion points: Data enters the agent context through the outputs of
membrane action listandmembrane action runcommands. - Boundary markers: No explicit delimiter or instruction-ignoring markers are defined for the data returned from the Membrane actions.
- Capability inventory: The skill allows the execution of arbitrary actions via
membrane action run, which can interact with the host's file system, environment variables, and external networks through Deno. - Sanitization: The skill does not implement specific sanitization or validation of external data before processing it as tool output.
Audit Metadata