removebg
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage globally via NPM. This is a vendor-managed tool associated with the skill's authoring organization. - [COMMAND_EXECUTION]: The skill utilizes several CLI commands (
membrane login,membrane connect,membrane action run, andmembrane request) to manage authentication and interact with the Remove.bg API. These commands are standard operations for the tool's intended functionality. - [PROMPT_INJECTION]: The skill processes untrusted external data which serves as a potential surface for indirect prompt injection.
- Ingestion points: The skill accepts image URLs and Base64-encoded strings as inputs for the
remove-background-from-urlandremove-background-from-base64actions defined in SKILL.md. - Boundary markers: No specific delimiters or "ignore instructions" warnings are provided in the instructions for handling these inputs.
- Capability inventory: The skill possesses the capability to execute shell commands via the CLI and perform network operations via the
membrane requestcommand (SKILL.md). - Sanitization: There is no evidence of explicit sanitization or validation logic for the provided URLs or strings within the skill's documentation.
Audit Metadata