ukg-ready
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage, which is the official command-line interface for the Membrane platform provided by the skill's vendor.\n- [COMMAND_EXECUTION]: The skill instructions utilize themembraneCLI to perform operations such as user login, connection management, and executing actions against the UKG Ready API.\n- [INDIRECT_PROMPT_INJECTION]: An attack surface exists where data processed from UKG Ready could contain instructions intended to influence the agent's behavior.\n - Ingestion points: Data retrieved from UKG Ready actions such as employee lists, reports, time entries, and applicants (SKILL.md).\n
- Boundary markers: None identified in the skill instructions.\n
- Capability inventory: Execution of predefined actions and raw API requests via the
membraneCLI.\n - Sanitization: None explicitly defined in the skill documentation.
Audit Metadata