microsoft-teams
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from npm, which is a vendor-owned tool used for authentication and service interaction. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to execute various commands for connection management, data retrieval, and API proxying. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes untrusted message content retrieved from Microsoft Teams.
- Ingestion points:
list-channel-messages,list-chat-messages, andget-channel-messageactions documented inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided.
- Capability inventory: The skill has the ability to write to the platform via
send-channel-messageand themembrane requestproxy as seen inSKILL.md. - Sanitization: No sanitization or validation of the ingested message content is described in the skill instructions.
Audit Metadata