alchemer

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the Membrane CLI tool from the official NPM registry.
  • Evidence: npm install -g @membranehq/cli@latest in SKILL.md.
  • Context: This is a standard installation of a trusted vendor tool required for the skill's functionality.
  • [COMMAND_EXECUTION]: The skill uses vendor-specific CLI commands to manage connections and execute actions.
  • Evidence: Commands such as membrane login, membrane connect, and membrane action run are used throughout SKILL.md.
  • Context: These commands are used within their intended scope for managing authorized service integrations.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes a platform feature to generate new integration actions based on natural language descriptions.
  • Evidence: membrane action create "DESCRIPTION" in SKILL.md.
  • Context: This execution occurs on the vendor's managed infrastructure and is a core capability of the platform for building API connectors dynamically.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 08:50 PM
Security Audit — agent-trust-hub — alchemer