swoogo

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally via npm. This is the official command-line interface for the Membrane platform.
  • [COMMAND_EXECUTION]: The skill utilizes several membrane CLI commands (membrane login, membrane connect, membrane action run, membrane request) to perform authentication and execute API requests. These commands are necessary for the skill's primary function of interacting with the Swoogo service.
  • [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes data from an external API.
  • Ingestion points: Data returned from membrane action run and membrane request.
  • Boundary markers: Not explicitly defined in the provided instructions.
  • Capability inventory: The agent can execute shell commands via the membrane CLI.
  • Sanitization: No specific data sanitization or validation logic is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 11:15 PM