here

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the vendor's command-line interface from the official npm registry.
  • Package: @membranehq/cli@latest.
  • [COMMAND_EXECUTION]: The skill uses the Membrane CLI to perform authenticated operations and interact with the HERE API.
  • Commands: membrane login, membrane connection ensure, membrane action list, membrane action run, and membrane request.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs (HERE and Membrane), which could potentially contain malicious instructions embedded in metadata or records.
  • Ingestion points: Data returned from membrane action list, membrane action run, and membrane request endpoints.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the skill body.
  • Capability inventory: The skill has the capability to perform network requests and manage authentication states via the CLI.
  • Sanitization: External API responses are processed directly without described sanitization or validation of the text content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:12 AM
Security Audit — agent-trust-hub — here