pandadoc

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the official @membranehq/cli package from the npm registry to facilitate communication with the Membrane platform.
  • [COMMAND_EXECUTION]: Executes the membrane CLI tool to perform authentication, discover actions, and manage PandaDoc document workflows.
  • [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes data retrieved from the PandaDoc API. This is a standard risk factor for integration skills, and the skill includes guidance on using pre-built actions to mitigate risks associated with raw API interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 04:11 PM