gathercontent
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to interact with the GatherContent service. - Operations include authentication via
membrane login, connection management withmembrane connect, and executing API actions throughmembrane action run. - All command executions are scoped to the vendor's official integration platform.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Membrane CLI from the npm registry.
- Package:
@membranehq/cli. - This is a standard dependency for skills interacting with the Membrane ecosystem.
- [PROMPT_INJECTION]: The skill processes external content from the GatherContent API, representing a surface for indirect prompt injection.
- Ingestion points: Data retrieved via
membrane action runandmembrane request(SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands in the retrieved content.
- Capability inventory: The agent has access to shell command execution through the
membraneCLI (SKILL.md). - Sanitization: No explicit sanitization or validation of the external API responses is mentioned.
Audit Metadata