openai
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the npm registry, which is a tool provided by the vendor to facilitate interaction with the Membrane platform. - [COMMAND_EXECUTION]: The skill utilizes the
membranecommand-line utility to handle user authentication, establish secure connections to OpenAI, and execute API actions. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from OpenAI APIs, such as chat completions and file content, which constitutes a surface for indirect prompt injection. 1. Ingestion points: API responses from OpenAI actions and the
membrane requestproxy. 2. Boundary markers: None. There are no explicit instructions for the agent to treat data from these sources as untrusted. 3. Capability inventory: The skill can execute shell commands via themembraneCLI and perform network operations through the platform proxy. 4. Sanitization: The instructions do not describe any sanitization or validation of the data retrieved from external OpenAI endpoints.
Audit Metadata