contentking
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Membrane CLI (@membranehq/cli) from the public NPM registry to facilitate platform interactions.
- [COMMAND_EXECUTION]: The agent uses the
membraneCLI to perform operational tasks such as authenticating, listing actions, and running SEO monitoring workflows. - [PROMPT_INJECTION]: The skill processes external SEO auditing data, creating a surface for indirect prompt injection.
- Ingestion points: SEO data and audit reports retrieved via
membrane action run(documented in SKILL.md). - Boundary markers: The instructions do not define specific delimiters to separate external data from agent instructions.
- Capability inventory: The agent has access to execute CLI commands and manage platform-based actions (documented in SKILL.md).
- Sanitization: No explicit validation or filtering logic for the external data is specified.
Audit Metadata