buildbuddy
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
membraneCLI for managing connections and interacting with the BuildBuddy service via actions and proxy requests. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the official NPM registry. - [PROMPT_INJECTION]: The skill processes external data from BuildBuddy which presents an attack surface for indirect prompt injection. Ingestion points: Data is ingested via the output of
membrane action runandmembrane requestcommands. Boundary markers: None are defined in the instructions to separate external data from the agent's context. Capability inventory: The skill uses shell execution to runmembranecommands. Sanitization: There is no explicit instruction to sanitize or validate data returned from the BuildBuddy API.
Audit Metadata