discord
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to manage connections and execute actions on the Membrane platform. - Evidence: Commands like
membrane action run,membrane action list, andmembrane action createare used to interact with the service. - [EXTERNAL_DOWNLOADS]: The instructions specify installing the
@membranehq/clipackage from the NPM registry. - Evidence:
npm install -g @membranehq/cli@latestandnpx @membranehq/cli@latestare used to set up the necessary tooling. - [DATA_EXFILTRATION]: The skill implements a security-positive pattern by utilizing server-side credential management.
- Evidence: The 'Best practices' section explicitly instructs the agent to 'never ask the user for API keys or tokens' and to 'Let Membrane handle credentials'.
- [PROMPT_INJECTION]: As the skill processes external data from Discord, there is a theoretical surface for indirect prompt injection.
- Evidence: The skill processes output from Discord actions which could contain malicious instructions, though it lacks specific boundary markers in the current instructions.
Audit Metadata