aimtell
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a global Node.js package to facilitate communication with the platform.\n
- Evidence:
npm install -g @membranehq/cli.\n - Context: This is the official CLI tool provided by the vendor (Membrane) to manage service connections.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute various CLI commands to perform operations.\n
- Evidence: Commands include
membrane login,membrane action run, andmembrane requestto interact with the Aimtell API via a proxy.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests data from external API responses.\n - Ingestion points: Data returned from
list-campaigns,list-subscribers, and other actions are incorporated into the agent's context.\n - Boundary markers: No specific delimiters or "ignore instructions" warnings are applied to the external data output.\n
- Capability inventory: The skill includes high-privilege capabilities such as
create-campaign,update-website-settings, anddelete-campaign.\n - Sanitization: The instructions do not define methods for validating or sanitizing the content retrieved from the Aimtell API.
Audit Metadata