mezmo
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
membranecommand-line interface to manage sessions, authenticate, and execute actions against the Mezmo API. - [EXTERNAL_DOWNLOADS]: Installs the
@membranehq/clipackage from the npm registry. This package is the official tool maintained by the skill's authoring organization. - [PROMPT_INJECTION]: The skill processes log data and action schemas retrieved from Mezmo, creating a surface for indirect prompt injection.
- Ingestion points: Command-line output from
membrane action runandmembrane action listcommands described in SKILL.md. - Boundary markers: None present in the instructions to delimit external data from agent commands.
- Capability inventory: Subprocess execution through the
membraneCLI. - Sanitization: No explicit sanitization or filtering of retrieved log content is specified.
Audit Metadata