typeform

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the global NPM registry. This is a vendor-provided tool necessary for the skill's operations.
  • [COMMAND_EXECUTION]: The instructions utilize the membrane command-line interface to perform actions such as logging in, managing connections, and executing Typeform-specific actions. These commands flow through the vendor's managed infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to retrieve Typeform responses via actions like list-responses. Because these responses contain data from external users, they represent a potential surface for indirect prompt injection if the agent processes the retrieved text without sanitization.
  • Ingestion points: SKILL.md documents the list-responses action which pulls data from Typeform.
  • Boundary markers: No specific delimiters or warnings for embedded instructions are mentioned in the prompt templates.
  • Capability inventory: The skill can execute shell commands via the Membrane CLI and make network requests via membrane request.
  • Sanitization: No explicit sanitization or filtering of response content is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:21 AM