Forms On Fire

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.4

Overview

This looks like a legitimate Forms On Fire integration, but it gives an agent broad authenticated ability to create, update, delete, and proxy API requests without enough built-in guardrails.

Install only if you trust Membrane and want an agent to operate on your Forms On Fire tenant. Use the least-privileged account available, confirm the exact connection and targets before any create/update/delete action, and be especially careful with raw proxy requests because they can reach authenticated API endpoints beyond the listed actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill documents destructive capabilities such as deleting users but provides no guidance to require explicit user confirmation, scope checks, or dry-run validation before execution. In an agent setting, this increases the risk of accidental or overly broad destructive actions being carried out from ambiguous prompts or operator error.

VirusTotal

65/65 vendors flagged this skill as clean.