10duke

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the @membranehq/cli package from NPM. This is an official tool provided by the vendor (membranedev) to facilitate interactions with their platform.
  • [COMMAND_EXECUTION]: The instructions involve executing various membrane CLI commands to manage authentication, connections, and API actions. These are standard operations for the tool's intended use.
  • [PROMPT_INJECTION]: The skill defines an interface for processing data from the 10Duke API and user-provided JSON via the --input flag.
  • Ingestion points: Data enters the context from the 10Duke API responses and user-provided arguments in SKILL.md.
  • Boundary markers: None explicitly defined in the prompt templates.
  • Capability inventory: Uses membrane action run and membrane request to execute operations.
  • Sanitization: Relies on the Membrane CLI's internal handling of structured JSON data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 08:55 AM