thoughtly

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the membrane command-line interface to manage connections and execute actions within the Thoughtly environment.
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the @membranehq/cli package from the npm registry. This is the official tool provided by the author to facilitate platform interaction.
  • [DATA_EXFILTRATION]: Facilitates communication with Thoughtly API endpoints using the membrane request command. This data transfer is conducted through Membrane's authenticated proxy service as part of the skill's core functionality.
  • [CREDENTIALS_UNSAFE]: Demonstrates secure credential management by instructing the agent to use Membrane connections rather than requesting or hardcoding sensitive API keys or tokens.
  • [PROMPT_INJECTION]: As an integration skill that processes external data, it has an inherent surface for indirect prompt injection.
  • Ingestion points: Data retrieved from Thoughtly via membrane action run and membrane request (SKILL.md).
  • Boundary markers: None present in the provided instructions.
  • Capability inventory: Subprocess execution via the membrane CLI (SKILL.md).
  • Sanitization: No explicit sanitization or filtering of external data is defined before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 06:35 PM