herobot-chatbot-marketing
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the npm registry. This is the official command-line tool for the Membrane platform, provided by the vendor. - [COMMAND_EXECUTION]: The integration relies on shell commands like
membrane login,membrane connect, andmembrane action runto manage authentication and interact with the HeroBot API. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
membrane action createfeature, which dynamically generates and deploys integration logic on the Membrane platform based on natural language descriptions. This behavior is the primary intended use of the platform's integration building capabilities. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection given its capabilities and data ingestion points.
- Ingestion points: External data such as user profiles, lead information, and message content retrieved from the HeroBot API via
membrane action run. - Boundary markers: None present; the agent is not instructed to use specific delimiters or ignore instructions embedded within the API responses.
- Capability inventory: The skill can perform write operations (e.g.,
send-message,create-user) and execute arbitrary actions created through the CLI. - Sanitization: There is no explicit mention of data sanitization or validation processes for the content received from the external service.
Audit Metadata