contractbook
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/cliglobal package from the NPM registry. This is the official tool used to facilitate communication with the Membrane platform and is consistent with the skill author's infrastructure. - [COMMAND_EXECUTION]: The skill executes various
membraneCLI commands to perform authentication (membrane login), connection management (membrane connect), and API interactions (membrane action run,membrane request). These are necessary for the skill's primary functionality. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data retrieved from the Contractbook API.
- Ingestion points: External contract data, templates, and records enter the agent context via the output of
membrane action runandmembrane requestcommands. - Boundary markers: The instructions do not specify the use of delimiters or specific XML tags to isolate retrieved data from agent instructions.
- Capability inventory: The skill utilizes subprocess execution for the
membraneCLI and provides tools for performing network requests through the Membrane proxy. - Sanitization: No explicit validation or escaping of the retrieved API data is defined within the instructions.
Audit Metadata