formdesk
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the npm registry. This is an official command-line tool provided by the vendor to facilitate the integration and manage authentication. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to perform operations such as authentication, service connection, and action execution. These commands are part of the intended functionality for interacting with the Membrane platform. - [PROMPT_INJECTION]: The skill is designed to process data retrieved from Formdesk, such as form results and user lists. This creates a surface for indirect prompt injection if the external data contains malicious instructions.
- Ingestion points: Data enters the context via the output of
membrane action runandmembrane action listcommands. - Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to ignore potentially embedded commands within the retrieved data.
- Capability inventory: The agent has the capability to execute
membraneCLI commands, including creating and running new actions. - Sanitization: There is no evidence of explicit sanitization or filtering of the content retrieved from the Formdesk API.
Audit Metadata