ezlynx

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @membranehq/cli package from the NPM registry to facilitate communication with the Ezlynx service.\n- [COMMAND_EXECUTION]: Utilizes the membrane CLI for operations including authentication (membrane login), connection management (membrane connect), and executing API actions (membrane action run).\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes policy and record data from the Ezlynx API.\n
  • Ingestion points: Output from the membrane action run and membrane request commands in SKILL.md.\n
  • Boundary markers: No specific delimiters or warnings for embedded instructions were identified in the provided text.\n
  • Capability inventory: The skill has the ability to execute shell commands via the membrane CLI.\n
  • Sanitization: No explicit sanitization or validation of the retrieved API data is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 06:53 AM