loginid
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions direct users to install the
@membranehq/clipackage globally using npm. This is the official command-line interface provided by Membrane for platform interactions. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI tool to perform various operations including logging in, creating connections, and running actions. These are standard commands required for the skill's primary purpose of LoginID integration. - [PROMPT_INJECTION]: The skill includes patterns where natural language queries and descriptions are passed as arguments to CLI commands (e.g.,
--intent "QUERY"andmembrane action create "DESCRIPTION"). This constitutes a surface for indirect prompt injection. - Ingestion points:
SKILL.md(user-provided intent, description, and JSON input for CLI arguments). - Boundary markers: None present in the provided command-line examples.
- Capability inventory: Shell command execution via the
membraneCLI, which has capabilities for network operations and remote action management. - Sanitization: The instructions do not specify any explicit validation or sanitization of the input strings before they are passed to the CLI.
Audit Metadata