serwersmspl
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the NPM registry. This package is the official tool provided by the vendor (membranedev) for interacting with their infrastructure.
- [COMMAND_EXECUTION]: Provides instructions to run various shell commands using the membrane CLI to perform authentication, create connections, and execute automated actions. These are legitimate operations required for the skill's intended functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the SerwerSMS.pl API via Membrane CLI outputs, which constitutes a standard attack surface for indirect prompt injection. 1. Ingestion points: CLI output from membrane action list and membrane action run as described in SKILL.md. 2. Boundary markers: No specific delimiters or instructions to ignore embedded commands were found. 3. Capability inventory: The skill allows for the execution of arbitrary actions on the SerwerSMS.pl platform using membrane action run. 4. Sanitization: No explicit sanitization or validation of the external API data is described in the instructions.
Audit Metadata