removebg

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @membranehq/cli package globally via NPM. This is a vendor-managed tool associated with the skill's authoring organization.
  • [COMMAND_EXECUTION]: The skill utilizes several CLI commands (membrane login, membrane connect, membrane action run, and membrane request) to manage authentication and interact with the Remove.bg API. These commands are standard operations for the tool's intended functionality.
  • [PROMPT_INJECTION]: The skill processes untrusted external data which serves as a potential surface for indirect prompt injection.
  • Ingestion points: The skill accepts image URLs and Base64-encoded strings as inputs for the remove-background-from-url and remove-background-from-base64 actions defined in SKILL.md.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are provided in the instructions for handling these inputs.
  • Capability inventory: The skill possesses the capability to execute shell commands via the CLI and perform network operations via the membrane request command (SKILL.md).
  • Sanitization: There is no evidence of explicit sanitization or validation logic for the provided URLs or strings within the skill's documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 03:51 AM