mojotxt
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the npm registry and utilizesnpxto run commands from the same vendor. These are official tools used to facilitate the integration. - [COMMAND_EXECUTION]: Uses the
membraneCLI to manage user sessions, list connections, and execute actions against the MojoTxt API. All commands are standard for the Membrane platform's operation. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by processing external data from the MojoTxt service.
- Ingestion points: External data enters the agent context via the output of
membrane action listandmembrane action runcommands. - Boundary markers: No specific delimiters are defined in the instructions to isolate untrusted data from the MojoTxt API.
- Capability inventory: The skill allows execution of CLI commands and network-based actions via the Membrane platform.
- Sanitization: Data sanitization is handled by the underlying platform rather than within the skill's instructions.
Audit Metadata