loginid

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The instructions direct users to install the @membranehq/cli package globally using npm. This is the official command-line interface provided by Membrane for platform interactions.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI tool to perform various operations including logging in, creating connections, and running actions. These are standard commands required for the skill's primary purpose of LoginID integration.
  • [PROMPT_INJECTION]: The skill includes patterns where natural language queries and descriptions are passed as arguments to CLI commands (e.g., --intent "QUERY" and membrane action create "DESCRIPTION"). This constitutes a surface for indirect prompt injection.
  • Ingestion points: SKILL.md (user-provided intent, description, and JSON input for CLI arguments).
  • Boundary markers: None present in the provided command-line examples.
  • Capability inventory: Shell command execution via the membrane CLI, which has capabilities for network operations and remote action management.
  • Sanitization: The instructions do not specify any explicit validation or sanitization of the input strings before they are passed to the CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 07:10 PM