zitadel
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the installation of the
@membranehq/clipackage from the NPM registry, which is a vendor-provided tool required for the skill's operation.\n- [COMMAND_EXECUTION]: The skill executes variousmembraneCLI commands to manage authentication, establish connections to ZITADEL instances, and invoke API actions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external identity and project data from ZITADEL, creating a potential attack surface for indirect prompt injection.\n - Ingestion points: Data retrieved from ZITADEL via
membrane action runandmembrane requestcommands in SKILL.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the ZITADEL data are provided.\n
- Capability inventory: The skill has the capability to execute shell commands via the
membraneCLI to modify ZITADEL configurations and data.\n - Sanitization: There is no evidence of sanitization or filtering applied to the data retrieved from the ZITADEL API before it is processed by the agent.
Audit Metadata