cisco-webex
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to interact with Cisco Webex services, including running actions and manual API requests. - [EXTERNAL_DOWNLOADS]: The instructions direct users to install the
@membranehq/clipackage from the global npm registry. This is the official CLI for the platform and is provided by the skill author. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes data from external sources such as Webex messages and meeting descriptions. Ingestion points: Data enters the context through actions like
list-messages,get-message, andlist-meetingsinSKILL.md. Boundary markers: None are defined to separate untrusted content from agent instructions. Capability inventory: The skill has the ability to execute shell commands via themembranetool as documented inSKILL.md. Sanitization: There is no evidence of sanitization or filtering for the retrieved data before it is processed by the agent.
Audit Metadata