Cloudbees

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.2

Overview

This CloudBees skill appears legitimate, but it gives an agent broad CloudBees change authority without enough built-in safeguards.

Install only if you trust Membrane and intend to let an agent operate on CloudBees resources. Use a least-privilege CloudBees account, avoid production access unless necessary, and require the agent to show the exact resource, action, and expected impact before any create, update, delete, toggle, or raw proxy request.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: This section lists destructive actions such as deleting environments, flags, and target groups without warning about confirmation, authorization checks, or irreversible effects. In an agent setting, that increases the chance of accidental or overly eager execution of high-impact operations against production CloudBees resources.

Missing User Warnings

Low

• Confidence: 82% confidence
• Finding: The proxy-request guidance encourages direct API access through Membrane but omits warnings that arbitrary requests may transmit sensitive data over the network or bypass safer, constrained pre-built actions. This can lead to unintended disclosure of private CloudBees data or broaden the blast radius of mistakes.

VirusTotal

57/57 vendors flagged this skill as clean.