Instana

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This looks like a real Instana integration, but it gives an agent broad account-changing power without enough built-in limits or confirmation guidance.

Install only if you trust Membrane with your Instana environment. Use a least-privilege or read-only account where possible, avoid admin credentials for routine use, and require explicit human approval before any create, update, delete, token, secret, permission, automation, billing, or payment-related operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly documents a generic proxy mechanism that supports POST, PUT, PATCH, and DELETE against the Instana API without any guardrails, confirmation guidance, or warnings about destructive operations. In an agent setting, this increases the chance that the model performs unintended state-changing actions or broad administrative API calls based on ambiguous user prompts.

VirusTotal

65/65 vendors flagged this skill as clean.