nexudus
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the npm registry. This is the official command-line tool for the Membrane platform, used here to manage the Nexudus integration. - [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands using the
membraneCLI, such aslogin,connect, andaction list. These commands are used to authenticate the session and interact with the service provider. - [REMOTE_CODE_EXECUTION]: Through the
membrane action runcommand, the skill executes integration logic on Membrane's remote servers. This is the core intended functionality of the skill, allowing it to perform Nexudus operations without local resource overhead. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it ingests and processes dynamic metadata (action names and descriptions) from an external service.
- Ingestion points: External data enters the context via the output of the
membrane action listandmembrane action getcommands. - Boundary markers: Absent; there are no specific markers or instructions provided to the agent to differentiate between system instructions and data retrieved from the API.
- Capability inventory: The skill possesses capabilities for remote action execution (
membrane action run) and local command execution. - Sanitization: Absent; the skill does not specify any validation or filtering of the metadata retrieved from the remote service.
Audit Metadata