Acuity Scheduling

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.2

Overview

This is a disclosed Acuity Scheduling integration that can change real scheduling records, so destructive actions should be confirmed carefully.

Install only if you trust Membrane and want an agent to access your Acuity Scheduling account. Review the Acuity/Membrane permissions, use the least-privileged account practical, and require an explicit yes before canceling appointments, deleting clients or blocks, rescheduling bookings, or using raw proxy requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill explicitly documents destructive operations such as canceling appointments, deleting clients, and deleting blocks, but provides no guidance to require user confirmation, verify target identifiers, or warn about irreversible effects. In an agent setting, this increases the risk of accidental or unauthorized state-changing actions from ambiguous prompts, especially because the integration manages real customer scheduling data.

VirusTotal

65/65 vendors flagged this skill as clean.