dynamics-crm

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Membrane CLI (@membranehq/cli) from the official NPM registry to enable platform capabilities.
  • [COMMAND_EXECUTION]: Employs the membrane CLI for managing Microsoft Dynamics 365 connections, searching for CRM actions, and executing them. This is the primary intended behavior of the skill.
  • [PROMPT_INJECTION]: The skill includes a surface for indirect prompt injection as it processes natural language descriptions to find or generate CRM actions. This is a core feature of the Membrane platform and is handled via their managed infrastructure.
  • Ingestion points: User-provided strings for QUERY and DESCRIPTION parameters in CLI commands (found in SKILL.md).
  • Boundary markers: Absent in the command-line examples.
  • Capability inventory: File reading and API execution capabilities via the Membrane CLI wrapper (found in SKILL.md).
  • Sanitization: Relies on the Membrane platform's internal processing and the agent's interpretation of the returned action schemas.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 11:35 PM