procountor
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/cliNode.js package from the official registry. This is a vendor-owned utility necessary for managing the connection to the Procountor service. - [COMMAND_EXECUTION]: The skill instructs the user to run various CLI commands such as
membrane login,membrane connect, andmembrane action run. These commands are used to interact with Procountor financial data and automate accounting workflows. - [PROMPT_INJECTION]: The skill processes external data retrieved from the Procountor API, which represents an indirect prompt injection surface.
- Ingestion points: The agent reads data from actions like
action listandaction runwhich retrieve invoices, reports, and logs. - Boundary markers: None present in the instructions to separate retrieved data from agent instructions.
- Capability inventory: The agent has access to execute shell commands via the
membraneCLI. - Sanitization: No explicit data sanitization or validation logic is defined in the skill markdown.
Audit Metadata