sap-successfactors
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
@membranehq/clipackage using npm. This is a vendor-owned tool necessary for executing the integration logic. - [COMMAND_EXECUTION]: The instructions utilize the
membraneCLI to perform operations such as authentication, connection management, and action execution. These commands are relevant to the skill's stated purpose of managing HCM data. - [PROMPT_INJECTION]: The skill processes external data from SAP SuccessFactors, creating a surface for indirect prompt injection. 1. Ingestion points: Data retrieved from
membrane action runand action definitions frommembrane action list. 2. Boundary markers: The instructions do not specify the use of delimiters to isolate external data from system instructions. 3. Capability inventory: The agent can modify external data and generate new integration actions using the CLI. 4. Sanitization: There are no explicit requirements for sanitizing or validating the data returned from the external API before it is processed by the agent.
Audit Metadata