vtiger
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
@membranehq/clipackage globally via npm. This is the official command-line interface provided by the skill author for managing integrations. - [COMMAND_EXECUTION]: The skill utilizes several terminal commands through the
membraneCLI to authenticate (membrane login), manage connections (membrane connection ensure), and execute CRM actions (membrane action run). These commands are necessary for the skill's primary functionality of interacting with the Vtiger API. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it retrieves content from Vtiger modules such as Leads, Comments, and Emails, which could potentially contain untrusted instructions.
- Ingestion points: External data is brought into the agent context via
membrane action run(Query Records, Retrieve Record) andmembrane requestas described inSKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore instructions embedded within the CRM data.
- Capability inventory: The skill has the ability to write to the file system (via CLI output redirection if the user chooses), make network requests (
membrane request), and modify CRM data (create-record,update-record,delete-record). - Sanitization: No specific sanitization or filtering logic is mentioned for the content retrieved from the CRM.
Audit Metadata