fraudlabs-pro
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official Membrane CLI utility (
@membranehq/cli) globally via npm to enable interaction with the service. - [COMMAND_EXECUTION]: The agent uses the
membranecommand-line tool to manage connections, list available actions, and execute requests against the FraudLabs Pro API. - [PROMPT_INJECTION]: The skill processes external transaction, order, and customer data retrieved from FraudLabs Pro, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Data returned from FraudLabs Pro API endpoints via
membrane action runandmembrane requestcommands. - Boundary markers: None identified in the skill instructions.
- Capability inventory: Subprocess execution through the
membraneCLI and network access via the Membrane proxy. - Sanitization: No explicit sanitization or validation of external data is described in the skill instructions.
Audit Metadata