dropbox
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Membrane CLI (@membranehq/cli) from the npm registry, which is a trusted vendor resource used for integration management.
- [COMMAND_EXECUTION]: All interactions with Dropbox are performed through the 'membrane' command-line interface, providing a controlled and audited environment for API calls.
- [REMOTE_CODE_EXECUTION]: The skill allows for the creation of new actions on the Membrane platform via 'membrane action create', which is a primary feature of the platform and executes within its managed infrastructure.
- [PROMPT_INJECTION]: As the skill processes external file data from Dropbox, it presents a surface for indirect prompt injection; however, this is an inherent risk of its primary function as a file management tool.
Audit Metadata