Salestown

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real Salestown integration, but it gives broad authenticated ability to run actions and raw API requests that could change or delete business records.

Review this before installing if Salestown contains sensitive sales, compensation, customer, or contract data. Use a least-privilege or test Membrane connection, pin or review the Membrane CLI package if possible, and require explicit confirmation before any write, delete, bulk update, workflow automation, or raw proxy API request.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The skill description is broad enough to match generic requests about managing data, records, or workflows, which can cause the agent to invoke this integration outside a clearly intended Salestown-specific context. Over-broad routing increases the chance of unintended external actions or data access through the connected system, especially because the skill supports operational actions and proxy requests.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal