paymob
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage globally via npm and usesnpxto execute vendor-specific tools. These are legitimate resources provided by the skill's author for interacting with the Membrane platform. - [COMMAND_EXECUTION]: The skill utilizes the
membranecommand-line interface to perform administrative tasks such as logging in, creating connections, and executing payment gateway actions. - [PROMPT_INJECTION]: The skill ingests user-provided descriptions for action discovery and creation. This data is passed as CLI arguments or within JSON payloads, which is the standard operational pattern for this platform.
Audit Metadata