frontegg
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/cliglobal package from the npm registry. - [COMMAND_EXECUTION]: The skill utilizes the
membranecommand-line tool to handle authentication, manage service connections, and execute API actions. These commands are used as intended for the skill's primary functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Frontegg API endpoints, which represents a potential attack surface for indirect prompt injection if the source data is compromised.
- Ingestion points: Data returned from
membrane action runandmembrane requestcommands. - Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the skill.
- Capability inventory: The skill has the capability to perform network requests and execute shell commands through the Membrane CLI.
- Sanitization: No explicit sanitization or validation of the retrieved API data is performed before it enters the agent context.
Audit Metadata