kamonio
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to perform various tasks, including user authentication (membrane login), searching for connectors (membrane search), and running specific actions (membrane action run). These are standard operations for the Membrane platform. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally via npm. This is a legitimate tool provided by the vendor for interacting with their services. - [PROMPT_INJECTION]: The skill involves processing data retrieved from Kamon.io (such as traces and spans). While this creates a surface for indirect prompt injection if external data contains malicious instructions, it is a standard operational risk for data-integration skills.
- Ingestion points: Data retrieved via
membrane action runandmembrane requestcommands (SKILL.md). - Boundary markers: None present.
- Capability inventory: Shell command execution via the
membraneCLI tool (SKILL.md). - Sanitization: No specific sanitization or filtering of Kamon.io data is mentioned.
Audit Metadata