Veracode

• Outcome: Review
• Latest audit: May 29, 2026 at 9:38 PM UTC
• Version:
  1.0.4

Overview

This Veracode skill is mostly coherent, but it gives an agent broad authenticated API access, including write and delete requests, without clear approval limits.

Install only if you trust Membrane and are comfortable granting delegated Veracode access. Use a least-privilege Veracode account, require the agent to confirm before any non-read or raw proxy request, and review exact endpoints and payloads before update or delete operations.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly documents direct proxy requests with arbitrary HTTP methods, including destructive verbs like DELETE, but does not require confirmation, constrain endpoint scope, or warn about state-changing effects. In an agent setting, this increases the chance that the model performs unsafe write or delete operations against a live Veracode tenant based on ambiguous or malicious prompts.

VirusTotal

65/65 vendors flagged this skill as clean.