swoogo
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the official NPM registry. This tool is provided by the vendor to manage integrations. - [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Membrane CLI for logging in, creating connections, and executing actions on the Swoogo platform.
- [PROMPT_INJECTION]: The skill processes data from external Swoogo events which represents a potential surface for indirect prompt injection if the ingested data contains malicious instructions.
- Ingestion points: Data returned from
membrane action runcommands inSKILL.md. - Boundary markers: Not specified in the skill instructions.
- Capability inventory: The agent can create and execute actions via the CLI as described in
SKILL.md. - Sanitization: No explicit sanitization or validation of the ingested data is described in the skill body.
Audit Metadata