venly
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
@membranehq/clitool from the npm registry to enable communication with the Membrane platform.- [COMMAND_EXECUTION]: Executes shell commands using themembraneCLI withinSKILL.mdto manage connections, search for blockchain actions, and perform proxy requests.- [PROMPT_INJECTION]: - Ingestion points: External data from the Venly API is ingested into the agent context via
membrane action runandmembrane requestcommands inSKILL.md. - Boundary markers: Absent; there are no explicit delimiters or instructions to ignore potential commands embedded in the retrieved blockchain data.
- Capability inventory: The skill performs subprocess execution of the
membraneCLI and initiates network requests to the proxy endpoint inSKILL.md. - Sanitization: Absent; content retrieved from external API endpoints is not validated or escaped before being presented to the agent.
Audit Metadata