sap-successfactors

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @membranehq/cli package using npm. This is a vendor-owned tool necessary for executing the integration logic.
  • [COMMAND_EXECUTION]: The instructions utilize the membrane CLI to perform operations such as authentication, connection management, and action execution. These commands are relevant to the skill's stated purpose of managing HCM data.
  • [PROMPT_INJECTION]: The skill processes external data from SAP SuccessFactors, creating a surface for indirect prompt injection. 1. Ingestion points: Data retrieved from membrane action run and action definitions from membrane action list. 2. Boundary markers: The instructions do not specify the use of delimiters to isolate external data from system instructions. 3. Capability inventory: The agent can modify external data and generate new integration actions using the CLI. 4. Sanitization: There are no explicit requirements for sanitizing or validating the data returned from the external API before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 01:44 AM