twelve-data

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the official Membrane CLI tool from the NPM registry. This package is provided by the vendor to facilitate secure communication with the integration platform.
  • [COMMAND_EXECUTION]: The skill executes various membrane CLI commands to manage authentication, list existing connections, and run data retrieval actions. These commands are standard operations for the skill's primary purpose.
  • [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by accepting user-provided intent and description strings to discover or create actions.
  • Ingestion points: The --intent and --description parameters in the membrane action list and membrane action create commands within SKILL.md.
  • Boundary markers: None present in the CLI command interpolation.
  • Capability inventory: The ability to execute actions and create new logic via the Membrane platform.
  • Sanitization: The skill relies on the Membrane platform's internal logic to sanitize and process natural language inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 03:19 AM
Security Audit — agent-trust-hub — twelve-data