typeform
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the global NPM registry. This is a vendor-provided tool necessary for the skill's operations. - [COMMAND_EXECUTION]: The instructions utilize the
membranecommand-line interface to perform actions such as logging in, managing connections, and executing Typeform-specific actions. These commands flow through the vendor's managed infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to retrieve Typeform responses via actions like
list-responses. Because these responses contain data from external users, they represent a potential surface for indirect prompt injection if the agent processes the retrieved text without sanitization. - Ingestion points:
SKILL.mddocuments thelist-responsesaction which pulls data from Typeform. - Boundary markers: No specific delimiters or warnings for embedded instructions are mentioned in the prompt templates.
- Capability inventory: The skill can execute shell commands via the Membrane CLI and make network requests via
membrane request. - Sanitization: No explicit sanitization or filtering of response content is described.
Audit Metadata