sonatype
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI for logging in, managing connections, and executing actions related to Sonatype data. This approach is the standard, secure method for interacting with the Membrane ecosystem. - [EXTERNAL_DOWNLOADS]: The skill directs the user to install the
@membranehq/clipackage from npm, which is the official client for the platform. - [PROMPT_INJECTION]: The skill ingests natural language for searching and defining actions, creating a surface for potential indirect instructions within the CLI parameters.
- Ingestion points: The
intentanddescriptionparameters in the CLI commands withinSKILL.md. - Boundary markers: No explicit delimiters are used around the interpolated strings.
- Capability inventory: Shell execution of the
membraneutility and dynamic generation of action logic. - Sanitization: Input strings are passed directly to the CLI without specified sanitization steps.
Audit Metadata