wappalyzer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions direct the user to install
@membranehq/cliglobally via the npm package manager. This CLI is a vendor-provided tool required for authentication and API interaction. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to perform various operations, including account management, connection verification, and executing API actions through a proxy. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Wappalyzer that profiles third-party websites, representing a potential surface for indirect injection.
- Ingestion points: Data retrieved from Wappalyzer's technology lookups (SKILL.md).
- Boundary markers: None identified in the provided instructions.
- Capability inventory: The agent can run arbitrary actions and proxy HTTP requests via the CLI.
- Sanitization: No specific sanitization or validation of the external API output is described.
Audit Metadata