herald
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Membrane CLI to perform tasks such as authentication and API interaction.
- Evidence: Commands such as
membrane login,membrane action run, andmembrane requestare used to interface with the platform. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the official developer tool for the platform.
- Evidence:
npm install -g @membranehq/cliis required to use the integration. - [DATA_EXFILTRATION]: No attempts to access sensitive local files or exfiltrate environment variables were found. The skill leverages the vendor's managed connection system to handle credentials securely.
- [PROMPT_INJECTION]: The skill processes external data retrieved from the Herald API, creating a surface for indirect prompt injection.
- Ingestion points: Data returned from
membrane action runandmembrane requestinSKILL.md. - Boundary markers: Absent; data is returned directly to the agent's context.
- Capability inventory: Shell command execution via the
membraneCLI. - Sanitization: Absent; the skill relies on the agent's internal safety filters.
Audit Metadata