campay
Warn
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill provides an official documentation link to Apple Pay (apple.com) while its stated purpose is integrating with CamPay, a campground-specific payment platform. This discrepancy is misleading and may cause confusion regarding the skill's actual integration targets.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, which creates a surface for indirect prompt injection if those responses contain malicious instructions.
- Ingestion points: Data enters the agent's context through output from
membrane action runandmembrane request. - Boundary markers: No specific delimiters or instructions are provided to the agent to treat external content as untrusted.
- Capability inventory: The skill uses the
membraneCLI to execute payment and account management actions. - Sanitization: No sanitization or validation logic is defined for the API data.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the NPM registry to function. - [COMMAND_EXECUTION]: The skill executes multiple shell commands via the
membraneCLI to interact with account, connection, and action management systems.
Audit Metadata