clickmeeting
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally via npm, which is the official tool provided by the vendor for managing integrations.
- [COMMAND_EXECUTION]: The skill functions by executing membrane CLI commands to search for connectors, manage connections, and run actions against the ClickMeeting API.
- [PROMPT_INJECTION]: The skill interacts with external ClickMeeting data, creating a surface for indirect prompt injection.
- Ingestion points: API response data returned by the membrane action list and membrane request commands.
- Boundary markers: None identified in the provided instructions.
- Capability inventory: The skill can execute API actions and proxy requests using the membrane action run and membrane request commands.
- Sanitization: No explicit sanitization or validation of the external API content is mentioned before it is processed by the agent.
Audit Metadata