Winston Ai

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.2

Overview

This is a coherent Winston AI integration that uses Membrane for authentication and API access, with no evidence of hidden or unrelated behavior.

Install this only if you trust Membrane and are comfortable connecting a Winston AI account. Prefer discovered Membrane actions over raw proxy requests, review any text or documents before sending them, require explicit confirmation for POST, PUT, PATCH, DELETE, or bulk requests, and revoke the Membrane/Winston AI connection when it is no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill explicitly instructs the agent to send direct proxy requests to the external Winston AI API, but it does not warn that user-provided content may be transmitted to a third-party service. This can lead to unintentional disclosure of sensitive text, documents, or metadata if the agent proxies user data without clear notice or consent.

VirusTotal

63/63 vendors flagged this skill as clean.