docraptor
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to use the official Membrane CLI for all operations, which is a secure method for handling authentication and API communication without requiring hardcoded secrets.
- [COMMAND_EXECUTION]: The skill instructions involve executing
membraneCLI commands for action discovery, creation, and execution. This behavior is aligned with the skill's purpose as an integration tool. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the public npm registry. This package belongs to the vendor's official scope. - [PROMPT_INJECTION]: Indirect Prompt Injection Surface Analysis:
- Ingestion points: The agent ingests data from DocRaptor actions via the
outputfield ofmembrane action runand action metadata frommembrane action listas documented inSKILL.md. - Boundary markers: No specific delimiters are used to wrap the output from the Membrane CLI.
- Capability inventory: The agent has the capability to execute shell commands via the
membraneCLI. - Sanitization: No explicit sanitization or validation of external action outputs is implemented within the skill instructions.
Audit Metadata