wb
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
@membranehq/clipackage globally. This is a vendor-owned utility required for the skill to interact with the Membrane platform.- [COMMAND_EXECUTION]: Employs themembraneCLI to handle authentication, connection management, and the execution of remote actions or API requests. These are core functionalities for the skill's purpose.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests and processes data from W&B (e.g., action lists) which could potentially contain malicious instructions from an external source. - Ingestion points: Output from
membrane action listandmembrane connection list. - Boundary markers: None used to separate external data from agent instructions.
- Capability inventory:
membrane action runandmembrane requestcan modify external state or perform network operations. - Sanitization: No explicit sanitization or validation of the external API data is mentioned.
Audit Metadata