userflow
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the NPM registry. This is a legitimate vendor tool used for authentication and acting as a proxy for API requests to Userflow. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where instructions could be embedded in the data retrieved from Userflow APIs.
- Ingestion points: Data retrieved from Userflow via
membrane action runandmembrane request(such as user profiles, flow descriptions, or group metadata) is ingested into the agent's context (SKILL.md). - Boundary markers: No specific boundary markers or instructions are provided to separate retrieved data from agent instructions.
- Capability inventory: The skill can execute various Userflow actions and make arbitrary authenticated requests to the Userflow API proxy.
- Sanitization: The skill does not explicitly sanitize or validate the content of the API responses before they are processed by the agent.
Audit Metadata