proxy-spider
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
membraneCLI to perform operations such as searching for connectors, establishing connections, and running service actions. This is the standard and intended method for interacting with the Membrane platform. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the official NPM registry. This is the official utility provided by the vendor (Membrane) and is a trusted dependency for this integration. - [PROMPT_INJECTION]: An indirect prompt injection surface is identified because the skill ingests data from the external Proxy Spider API.
- Ingestion points: Output from
membrane action list,membrane connection list, andmembrane requestas described in SKILL.md. - Boundary markers: None are explicitly defined in the instructions to separate API data from agent instructions.
- Capability inventory: The skill utilizes the
membraneCLI for platform interactions, providing a range of capabilities for data management. - Sanitization: No sanitization or validation of external API content is mentioned in the provided instructions.
Audit Metadata