beeple
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clitool from the official NPM registry, which is a verified vendor resource for the Membrane platform. - [COMMAND_EXECUTION]: Shell commands are used to interact with the Beeple API via the
membraneCLI. This is the intended functionality of the skill and relies on the official vendor utility. - [PROMPT_INJECTION]: The skill processes external data from the Beeple API which presents a surface for indirect prompt injection. Ingestion points: Data returned from
membrane action listandmembrane requestdocumented inSKILL.md. Boundary markers: Absent. Capability inventory: Command execution via themembraneCLI. Sanitization: Absent. - [SAFE]: Authentication is managed server-side by the Membrane platform, avoiding the need for hardcoded secrets or local exposure of API keys.
Audit Metadata