setmore
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/cliglobal package from the official NPM registry, which is the vendor's tool for interacting with their platform. - [COMMAND_EXECUTION]: The instructions utilize the
membraneCLI to perform operations such as login, connection management, and action execution. These are standard operations for the platform's workflow. - [REMOTE_CODE_EXECUTION]: The skill runs hosted integration logic on the Membrane platform via the
membrane action runcommand. This is the intended mechanism for executing API integrations. - [PROMPT_INJECTION]: The skill processes data from external Setmore records (e.g., customer names, appointment notes), creating a surface for indirect prompt injection if those records contain malicious instructions.
- Ingestion points: Output from
membrane action runcontaining Setmore data from SKILL.md. - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Network access and command execution via the
membraneCLI. - Sanitization: Not specified; the skill relies on the agent's inherent safety guardrails when processing external content.
Audit Metadata