mailjet
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the official NPM registry. This package is the primary tool provided by the vendor for managing integrations. - [COMMAND_EXECUTION]: The skill uses various shell commands via the
membraneCLI to perform actions such asmembrane login,membrane connect, andmembrane action run. These commands are used as intended to manage the Mailjet integration. - [PROMPT_INJECTION]: The skill retrieves data from Mailjet (e.g., templates, contact lists) and processes it. While this presents a surface for indirect prompt injection if external data contains malicious instructions, no specific vulnerabilities were found in the skill's logic, and the risk is typical for data-processing integrations.
Audit Metadata