thoughtly
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
membranecommand-line interface to manage connections and execute actions within the Thoughtly environment. - [EXTERNAL_DOWNLOADS]: Fetches and installs the
@membranehq/clipackage from the npm registry. This is the official tool provided by the author to facilitate platform interaction. - [DATA_EXFILTRATION]: Facilitates communication with Thoughtly API endpoints using the
membrane requestcommand. This data transfer is conducted through Membrane's authenticated proxy service as part of the skill's core functionality. - [CREDENTIALS_UNSAFE]: Demonstrates secure credential management by instructing the agent to use Membrane connections rather than requesting or hardcoding sensitive API keys or tokens.
- [PROMPT_INJECTION]: As an integration skill that processes external data, it has an inherent surface for indirect prompt injection.
- Ingestion points: Data retrieved from Thoughtly via
membrane action runandmembrane request(SKILL.md). - Boundary markers: None present in the provided instructions.
- Capability inventory: Subprocess execution via the
membraneCLI (SKILL.md). - Sanitization: No explicit sanitization or filtering of external data is defined before it is processed by the agent.
Audit Metadata