Agencyzoom

Security checks across malware telemetry and agentic risk

Overview

This AgencyZoom skill is mostly coherent, but it gives an agent broad live CRM mutation access through a raw API proxy without clear confirmation safeguards.

Install only if you trust Membrane and are comfortable giving an agent access to live AgencyZoom data. Use a least-privileged AgencyZoom account, prefer listed Membrane actions over raw proxy calls, and explicitly review any create, update, conversion, completion, or DELETE-style operation before it runs.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill explicitly instructs the agent to use a generic proxy capable of GET, POST, PUT, PATCH, and DELETE against the AgencyZoom API, but it does not require confirmation, scoping, or safety checks before state-changing operations. In a CRM context, this can lead an agent to modify or delete customer, lead, note, task, or policy data based on ambiguous prompts or incorrect assumptions, increasing the risk of unintended destructive actions.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal