altera-payroll
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Membrane CLI (
@membranehq/cli) from the public npm registry. This is the primary tool provided by the vendor (membranedev) to interact with their integration platform. - [COMMAND_EXECUTION]: Instructs the user to run various
membraneCLI commands to perform authentication, search for payroll actions, and execute integration tasks. All commands are standard usage for the documented platform. - [DATA_EXFILTRATION]: Facilitates the transfer of payroll records between Altera Payroll and the Membrane platform. Authentication is handled server-side through a managed OAuth flow, preventing the exposure or local storage of sensitive API keys or employee data.
- [REMOTE_CODE_EXECUTION]: Utilizes Membrane's capability to dynamically generate and run actions based on natural language descriptions. This behavior is an intended feature of the vendor's platform and is restricted to the user's authenticated account context.
Audit Metadata