Apache Superset

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This appears to be a legitimate Apache Superset integration, but it gives an agent broad authenticated access that could change or delete Superset resources without clear approval guardrails.

Install only if you trust Membrane and intend to let an agent operate on your Superset instance. Use a least-privileged Superset account, connect only the intended instance, prefer named Membrane actions over raw proxy requests, and require explicit confirmation before any create, update, patch, or delete operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill description is broad enough to trigger on generic requests about 'data, records, and automate workflows,' which can cause the agent to invoke this integration outside a clearly intended Apache Superset context. Over-broad routing increases the chance of unnecessary external access, unintended data operations, or using the wrong skill for ordinary user requests.

VirusTotal

65/65 vendors flagged this skill as clean.