outsystems
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the npm registry. This is the official command-line tool provided by the vendor for interacting with their platform. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to perform operations such as authentication, searching for connectors, and executing actions. These commands are necessary for the skill's primary functionality of managing OutSystems data. - [PROMPT_INJECTION]: The skill acts as an interface for reading data from external OutSystems APIs, which introduces a surface for indirect prompt injection if the retrieved data contains malicious instructions.
- Ingestion points: Data is brought into the agent context through the output of
membrane action runandmembrane requestcommands. - Boundary markers: The instructions do not specify the use of delimiters or clear separation between system instructions and data retrieved from the API.
- Capability inventory: The skill has the capability to execute shell commands via the
membraneCLI tool. - Sanitization: There is no mention of data validation or sanitization of the API responses before they are presented to the agent.
Audit Metadata