zip-archive-api
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Membrane CLI (@membranehq/cli) from the NPM registry. This is a vendor-provided tool used to manage the integration lifecycle.\n- [COMMAND_EXECUTION]: Various instructions involve running the
membraneCLI for authentication (membrane login), connection management, and executing API actions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Zip Archive API responses. While this creates a surface for potential indirect prompt injection if an archive contains malicious file names or content, the risk is mitigated by the skill's reliance on structured JSON output and its specific functional scope.
Audit Metadata