1Crm

Security checks across malware telemetry and agentic risk

Overview

This looks like a legitimate 1CRM integration, but it gives broad authenticated CRM control without enough safeguards for writes, deletes, bulk changes, or admin actions.

Review before installing. Use a dedicated low-privilege 1CRM account where possible, verify that you trust Membrane and the npm CLI source, and require explicit approval before the agent creates, edits, deletes, imports, exports, mass-updates, or changes administrative or financial CRM records.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: The skill documents a generic proxy request mechanism that supports state-changing methods like POST, PUT, PATCH, and DELETE without any warning, confirmation guidance, or guardrails for destructive operations. In a CRM context, this can enable unintended modification or deletion of customer, sales, or financial records if an agent uses raw requests instead of safer scoped actions.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal