sheetdb
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations like searching, connecting, and running actions. These commands are restricted to the vendor's own platform utilities. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@membranehq/clipackage from the npm registry. This is a vendor-owned package necessary for the skill's operation. - [SAFE]: The skill explicitly instructs the agent to let the platform handle authentication, avoiding the collection or storage of sensitive API keys or secrets within the agent's environment.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it processes data from external spreadsheets.
- Ingestion points: Data returned from
membrane action runandmembrane requestinSKILL.md. - Boundary markers: Absent.
- Capability inventory: Subprocess execution via
membraneCLI for API interactions. - Sanitization: Absent.
Audit Metadata