Peoplegoal

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.2

Overview

The skill is a coherent PeopleGoal integration, but it gives agents broad authenticated access to change or delete sensitive HR data without clear confirmation safeguards.

Install only if you trust Membrane and are comfortable giving an agent access to PeopleGoal data. Use a least-privilege PeopleGoal account, prefer discovered Membrane actions over raw proxy calls, and require the agent to show the exact method, endpoint, and payload before any create, update, or delete request.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill explicitly documents raw proxy requests with support for POST, PUT, PATCH, and DELETE, but does not require confirmation or warn that these can modify or delete HR-related data. In a PeopleGoal context, this could lead an agent to perform sensitive state-changing operations on employee records, reviews, tasks, or settings without adequate user awareness or safeguards.

VirusTotal

63/63 vendors flagged this skill as clean.