cubicl
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@membranehq/clipackage from the official npm registry. This is a standard dependency for the skill's functionality and originates from the vendor's official package scope. \n- [COMMAND_EXECUTION]: The skill utilizes themembraneCLI to perform authentication, search for connectors, and execute actions. These commands are the primary and intended method of interaction for this platform integration. \n- [PROMPT_INJECTION]: The skill ingests untrusted data from the Cubicl API (viamembrane action listandmembrane request) which the agent then uses to determine action schemas. While this is a surface for indirect prompt injection, it is the standard operational mode for this type of integration and no malicious intent was found. \n - Ingestion points:
SKILL.mdinstructions for parsingmembrane action listandmembrane requestoutput. \n - Boundary markers: Absent. \n
- Capability inventory: Shell command execution via the
membraneCLI. \n - Sanitization: Absent.
Audit Metadata