Fanout

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This appears to be a legitimate Fanout integration, but it gives an authenticated agent broad ability to call Fanout API endpoints, including data-changing requests.

Install only if you trust Membrane and intend to let the agent act on your Fanout account. Prefer discovered Membrane actions, review the exact connection, endpoint, method, and request body before POST, PUT, PATCH, or DELETE requests, and use a least-privilege account or revoke the connection when finished.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 78% confidence
• Finding: The skill description is broad enough that it could be selected for generic 'manage data' or workflow requests that are not specifically about Fanout. Over-broad routing increases the chance an agent invokes this skill in the wrong context, which can lead to unintended external actions or disclosure through the Membrane/Fanout integration.

VirusTotal

65/65 vendors flagged this skill as clean.