niceboard
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent and user to execute several shell commands using the
membraneCLI to manage connections and run actions. These commands are part of the standard operating procedure for the Membrane integration platform. - [EXTERNAL_DOWNLOADS]: The instructions include installing the
@membranehq/clipackage from the public NPM registry. This is the official tool provided by the vendor (Membrane) for this integration and is a trusted resource. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
membrane action createandmembrane action runcommands. This allows for the dynamic generation and execution of logic on the Membrane platform based on user-defined intents. While this represents dynamic code execution, it is the primary purpose of the skill and is performed within the vendor's managed infrastructure. - [PROMPT_INJECTION]: The skill exhibits an indirect surface for prompt injection (Category 8) because it processes natural language 'intents' to create and execute actions. This is documented as a core feature of the integration, and the skill includes best practices to prefer managed actions over raw API calls.
Audit Metadata