mailchimp
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Mailchimp (e.g., campaign content, member lists), which are external sources that could contain malicious instructions. * Ingestion points: Data retrieved via
membrane action runandmembrane requestfrom Mailchimp endpoints. * Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the skill instructions. * Capability inventory: The skill can execute CLI commands and make network requests through the Membrane proxy. * Sanitization: The instructions do not specify sanitization or validation of data fetched from Mailchimp before the agent processes it. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI using npm. * Evidence:
npm install -g @membranehq/cli@latest. This is a vendor-owned resource used for the skill's primary functionality.
Audit Metadata