signalfx
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
@membranehq/clipackage from the official NPM registry to facilitate communication with the SignalFx API via Membrane's infrastructure. - [COMMAND_EXECUTION]: The skill utilizes several shell commands (
membrane login,membrane connection,membrane action, andmembrane request) to handle authentication, manage connections, and execute API actions. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by ingesting data from external SignalFx dashboards, events, and detectors.
- Ingestion points: External data is brought into the agent's context through
membrane action runandmembrane requestcommands. - Boundary markers: None are explicitly defined in the skill instructions to separate untrusted data from the system prompt.
- Capability inventory: The skill has the capability to perform network requests and data retrieval via the Membrane CLI.
- Sanitization: There is no evidence of explicit sanitization or filtering of the SignalFx response data before it is processed by the agent.
Audit Metadata