gameanalytics
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from npm. This is an official tool provided by the vendor for interacting with their platform. - [COMMAND_EXECUTION]: Employs the
membranecommand-line utility to manage sessions and execute GameAnalytics operations. These commands are limited to the intended functionality of the integration. - [PROMPT_INJECTION]: The skill processes data retrieved from the GameAnalytics API, creating a surface for potential indirect prompt injection from external content.
- Ingestion points: Data enters the environment via
membrane action runandmembrane requestcalls inSKILL.md. - Boundary markers: No specific delimiters are used to separate API data from instructions.
- Capability inventory: Includes execution of CLI commands and network proxying.
- Sanitization: Relies on the user's agent and the platform's internal handling of API responses.
Audit Metadata