forcemanager

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the membrane CLI to interact with the ForceManager API, including searching for actions, creating new ones, and executing them.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @membranehq/cli package from the public npm registry to function.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the ForceManager CRM.
  • Ingestion points: Data enters the context through membrane action run and membrane action list commands.
  • Boundary markers: There are no explicit instructions to use delimiters or ignore instructions within the retrieved CRM data.
  • Capability inventory: The agent can perform network requests and manage authentication through the membrane CLI.
  • Sanitization: No specific sanitization or filtering of the CRM data is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 07:39 PM
Security Audit — agent-trust-hub — forcemanager