shopee
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Membrane CLI (@membranehq/cli) globally from the npm registry to facilitate communication with the Shopee platform.
- [COMMAND_EXECUTION]: The skill executes multiple shell commands using the 'membrane' binary to handle user authentication, connection management, and action execution.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Shopee API responses, which could contain malicious instructions. 1. Ingestion points: Shopee API data returned by 'membrane action run' and 'membrane request'. 2. Boundary markers: The instructions do not specify any delimiters or safety warnings for the agent to ignore instructions embedded in the API output. 3. Capability inventory: The skill utilizes shell command execution and network-enabled proxy requests. 4. Sanitization: There is no evidence of sanitization or strict schema validation for the external data before it is processed by the agent.
Audit Metadata