Zephyr Essential Cloud

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.2

Overview

This appears to be a legitimate Zephyr Cloud integration, but it gives agents broad authenticated API access that can modify or delete Zephyr data without clear built-in approval or scoping rules.

Install only if you intend to connect Membrane to Zephyr Essential Cloud. Use the least-privileged Zephyr account practical, verify the Membrane CLI package before global installation, and require explicit review before any POST, PUT, PATCH, or DELETE action or proxy request.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The invocation description is overly broad: 'Manage data, records, and automate workflows' can match many generic enterprise requests, increasing the chance the skill is selected outside its intended Zephyr-specific context. Over-broad routing can lead an agent to initiate networked actions against the wrong system, causing unintended data access, modification, or workflow execution.

VirusTotal

63/63 vendors flagged this skill as clean.