Blackthorn

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This looks like a real Blackthorn integration, but it gives an agent broad authenticated access to payment and business records without clear safeguards for changes.

Install only if you trust Membrane as an intermediary for Blackthorn data. Use a least-privilege Blackthorn connection, avoid production write access unless needed, and require explicit confirmation before create, update, delete, refund, payment, bulk-change, or raw proxy requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly documents a generic proxy request capability that can send arbitrary HTTP methods, headers, query parameters, and bodies to the Blackthorn API, but it does not warn that these requests may create, modify, or delete production data. In an agent setting, this omission increases the risk that an agent will perform high-impact state-changing operations without clear user awareness or confirmation.

VirusTotal

65/65 vendors flagged this skill as clean.