onespan
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
@membranehq/clifrom the npm registry to support platform integration. - [COMMAND_EXECUTION]: Uses the
membraneCLI to execute actions and manage connections, which is the documented method for interacting with the platform. - [SAFE]: The skill follows security best practices by delegating authentication to the Membrane platform, preventing local credential exposure.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via data ingested from the OneSpan API. Evidence: 1. Ingestion: Output from
membrane action runandmembrane request. 2. Boundary markers: Absent. 3. Capability inventory: Network access viamembrane request. 4. Sanitization: Absent. The risk is assessed as safe/low given the intended use of structured actions.
Audit Metadata