clickfunnels-classic
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the official NPM registry and utilizesnpxto run the latest version of the tool. These are standard procedures for utilizing the vendor's provided tooling. - [COMMAND_EXECUTION]: Interaction with ClickFunnels is performed through the
membranecommand-line interface, which includes operations for authentication, connection management, and executing API actions. These commands are necessary for the skill's stated purpose. - [PROMPT_INJECTION]: As the skill is designed to ingest and process data from external ClickFunnels endpoints, it presents a surface for indirect prompt injection where untrusted data could theoretically contain instructions.
- Ingestion points: Data retrieved from ClickFunnels via
membrane action runandmembrane requestcommands (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the documentation.
- Capability inventory: The agent can execute various CLI commands to read and modify data on the linked ClickFunnels account (SKILL.md).
- Sanitization: Standard sanitization for CLI arguments is expected to be handled by the Membrane CLI tool itself.
Audit Metadata