twelve-data
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Membrane CLI tool from the NPM registry. This package is provided by the vendor to facilitate secure communication with the integration platform.
- [COMMAND_EXECUTION]: The skill executes various
membraneCLI commands to manage authentication, list existing connections, and run data retrieval actions. These commands are standard operations for the skill's primary purpose. - [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by accepting user-provided intent and description strings to discover or create actions.
- Ingestion points: The
--intentand--descriptionparameters in themembrane action listandmembrane action createcommands within SKILL.md. - Boundary markers: None present in the CLI command interpolation.
- Capability inventory: The ability to execute actions and create new logic via the Membrane platform.
- Sanitization: The skill relies on the Membrane platform's internal logic to sanitize and process natural language inputs.
Audit Metadata