the-things-network
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the official
@membranehq/clipackage from the NPM registry to facilitate communication between the agent and the Membrane platform. - [COMMAND_EXECUTION]: Executes various
membraneCLI commands for authentication, service connection, and running automated actions. This is the intended operation of the skill. - [PROMPT_INJECTION]: The skill processes data from The Things Network (uplink and downlink messages), which represents an entry point for untrusted external data into the agent's context.
- Ingestion points: Uplink messages and device data retrieved via
membrane action run. - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Capability to execute shell commands via the Membrane CLI.
- Sanitization: Relies on the underlying Membrane platform and agent guardrails for data processing.
Audit Metadata