tink
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to install and run the official Membrane CLI (
@membranehq/cli) to interact with Tink services. It utilizes commands likemembrane login,membrane connect, andmembrane action runto manage financial data and workflows. - [EXTERNAL_DOWNLOADS]: Downloads the latest version of the Membrane CLI package from the public npm registry during the installation phase.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing user-supplied natural language through CLI parameters.
- Ingestion points: User input is passed via
--intentinmembrane action listand--inputinmembrane action runcommands. - Boundary markers: Not explicitly defined in the provided markdown instructions.
- Capability inventory: The skill can execute actions on the Tink platform and create new actions via
membrane action create. - Sanitization: Not visible in the static instructions; behavior depends on the underlying CLI implementation.
Audit Metadata