alertops
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to execute various tasks such as searching for connectors, connecting accounts, and running actions against the AlertOps API. - [EXTERNAL_DOWNLOADS]: The skill recommends the global installation of
@membranehq/clivia npm. This is the official tool provided by the vendor (membranedev) and is a standard requirement for this skill's functionality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes data from AlertOps (such as incidents, logs, and reports) that could be controlled by external actors.
- Ingestion points: Data enters the agent context through the output of commands like
membrane action runandmembrane requestas described inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are used when the agent processes AlertOps data.
- Capability inventory: The skill utilizes shell command execution via the
membraneCLI, which allows for reading and writing data to the AlertOps platform. - Sanitization: There is no evidence of sanitization or filtering of the content retrieved from AlertOps before it is processed by the agent.
Audit Metadata