nano-nets
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage globally using npm. This is a vendor-provided tool used to interact with the Membrane platform. - [COMMAND_EXECUTION]: The instructions direct the agent to execute several shell commands using the
membraneCLI, includingmembrane login,membrane connect,membrane action list, andmembrane action runto manage data and execute operations. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface where natural language inputs are used to search for or create actions via the
--intentand"DESCRIPTION"arguments. - Ingestion points: User-provided strings or agent-generated descriptions passed to the
membrane action listandmembrane action createcommands. - Boundary markers: None provided in the instructions to separate untrusted data from the command context.
- Capability inventory: The skill can execute shell commands (
membraneCLI) and perform network operations through actions run on the Membrane platform. - Sanitization: There is no mention of input validation or sanitization for the strings used in natural language discovery or action creation.
Audit Metadata