humi
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membranecommand-line interface to manage authentication, list connections, and execute HR-related actions. - [EXTERNAL_DOWNLOADS]: It instructs the user to install the
@membranehq/clipackage via npm. This is a legitimate tool provided by the skill's author (membranedev) for interacting with their service. - [PROMPT_INJECTION]: The skill processes user-supplied natural language through the
membrane action list --intentandmembrane action createcommands. This constitutes an indirect prompt injection surface as it passes untrusted data to a tool, but it is a fundamental part of the intended functionality and includes instructions for handling result schemas.
Audit Metadata