rokt
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the npm registry and usesnpxto execute vendor-provided tools. These resources are owned by the skill author.- [COMMAND_EXECUTION]: The skill utilizes themembraneCLI to perform operations such as searching for connectors, managing connections, and executing API actions. This is the intended primary functionality for interacting with the Rokt platform.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes output from external API calls and tool executions. - Ingestion points: Output from
membrane action run,membrane action list, andmembrane requestcommands (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded content were identified.
- Capability inventory: The agent can execute shell commands and perform network requests via the
membraneCLI. - Sanitization: No explicit sanitization or validation logic is defined for the external data being processed.- [SAFE]: The skill demonstrates safe credential management by delegating authentication to the Membrane platform and explicitly instructing the user not to handle API keys directly.
Audit Metadata