firehydrant
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the npm registry. This is a well-known service and the package is a core component of the author's ecosystem. - [COMMAND_EXECUTION]: Several commands are provided for the
membraneCLI to manage authentication (membrane login), service connections (membrane connect), and action execution (membrane action run). These are standard operational commands for this platform. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (FireHydrant incidents, tasks, and artifacts). While this creates a potential surface for indirect prompt injection, it is a standard requirement for the skill's primary function of incident management.
- Ingestion points: Data returned from
membrane action runtargeting FireHydrant endpoints. - Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: The agent has the ability to execute shell commands via the Membrane CLI.
- Sanitization: Not explicitly documented; relies on the agent's internal safety filters.
- [DYNAMIC_EXECUTION]: The
membrane action createcommand allows for the dynamic generation of new integration actions based on descriptions. This logic is handled server-side by the Membrane platform.
Audit Metadata