zabbix
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the Membrane CLI (
@membranehq/cli) from the public registry. This is an official utility provided by the vendor to facilitate the integration. - [COMMAND_EXECUTION]: The instructions involve executing various
membraneCLI commands to manage authentication, establish connections to Zabbix instances, and execute monitoring actions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Zabbix environments, creating a potential surface for indirect prompt injection if the external data contains malicious instructions.
- Ingestion points: Data is retrieved from Zabbix via
membrane action runandmembrane requestcommands (e.g., host items, problem descriptions). - Boundary markers: No specific delimiters or instructions to ignore embedded content were found in the skill definitions.
- Capability inventory: The agent can perform authenticated network requests to the Zabbix API and execute pre-defined monitoring actions.
- Sanitization: The skill does not explicitly define sanitization logic for the data retrieved from the Zabbix API.
Audit Metadata