solar-nexus
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/cliNode.js package. This is the official command-line tool for the Membrane platform, provided by the skill's author to facilitate secure integration with third-party services. - [COMMAND_EXECUTION]: The skill uses
membraneCLI commands to perform authentication, discover connectors, and run actions against the Solar Nexus API. These commands are part of the intended functionality and use the vendor's established infrastructure for secure API proxying. - [PROMPT_INJECTION]: The skill includes actions that retrieve data from the Solar Nexus platform, such as project details and log entries, which represents a surface for indirect prompt injection.
- Ingestion points: Data returned from Solar Nexus via
membrane action runandmembrane requestcommands. - Boundary markers: No explicit delimiters are used in the provided command templates.
- Capability inventory: Execution of
membraneCLI commands for API interaction. - Sanitization: Relies on the Membrane platform's internal processing and the AI agent's built-in safety filters.
Audit Metadata