Sage Payroll

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.2

Overview

This Sage Payroll skill appears purpose-aligned, but it should be reviewed because it enables broad authenticated payroll API changes without clear approval guardrails.

Install only if you trust Membrane and are comfortable connecting it to Sage Payroll. Use a least-privileged Sage account, prefer prebuilt or read-only actions, require explicit confirmation before any write/update/delete request, review the exact endpoint and affected records, and revoke the connection when no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly documents raw proxy requests with mutating HTTP methods such as POST, PUT, PATCH, and DELETE, but provides no warning to require explicit user confirmation before state-changing operations. In a payroll context, this increases the risk of accidental or unauthorized modification of employee, payrun, or settings data, which is especially sensitive and operationally impactful.

VirusTotal

65/65 vendors flagged this skill as clean.