icims
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The s k i l l i n s t r u c t s t h e u s e r t o i n s t a l l t h e
@m e m b r a n e h q/c l ip a c k a g e g l o b a l l y v i a n p m . T h i s i s t h e o f f i c i a l c o m m a n d - l i n e i n t e r f a c e p r o v i d e d b y t h e v e n d o r t o i n t e r a c t w i t h t h e i r s e r v i c e s .
- [COMMAND_EXECUTION]: T h e a g e n t i s d i r e c t e d t o r u n v a r i o u s s h e l l c o m m a n d s u s i n g t h e
m e m b r a n eC L I f o r a u t h e n t i c a t i o n , c o n n e c t i o n m a n a g e m e n t , a n d r u n n i n g i n t e g r a t i o n a c t i o n s . - [INDIRECT_PROMPT_INJECTION]: T h e s k i l l p r o c e s s e s r e c r u i t m e n t d a t a r e t r i e v e d f r o m i C I M S , w h i c h c o n s t i t u t e s a n i n d i r e c t p r o m p t i n j e c t i o n s u r f a c e i f e x t e r n a l r e c o r d s c o n t a i n m a l i c i o u s i n s t r u c t i o n s .
- I n g e s t i o n p o i n t s : O u t p u t f r o m
m e m b r a n e a c t i o n r u nc o m m a n d s . - B o u n d a r y m a r k e r s : N o n e i d e n t i f i e d i n t h e s k i l l i n s t r u c t i o n s .
- C a p a b i l i t y i n v e n t o r y : C o m m a n d e x e c u t i o n a n d n e t w o r k a c c e s s v i a t h e
m e m b r a n eC L I . - S a n i t i z a t i o n : N o d a t a s a n i t i z a t i o n o r v a l i d a t i o n m e c h a n i s m s a r e s p e c i f i e d .
- [DYNAMIC_EXECUTION]: T h e s k i l l u s e s
m e m b r a n e a c t i o n c r e a t et o d y n a m i c a l l y g e n e r a t e i n t e g r a t i o n l o g i c o n t h e v e n d o r ' s p l a t f o r m b a s e d o n n a t u r a l l a n g u a g e p r o m p t s .
Audit Metadata