bitrise

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally using npm (npm install -g @membranehq/cli@latest). This is the official command-line interface provided by the skill's author to interact with their platform.
  • [COMMAND_EXECUTION]: The skill relies on executing various membrane CLI commands to perform its functions, including membrane login, membrane connect, and membrane action run. These are used as intended for the skill's primary purpose.
  • [SAFE]: The skill follows security best practices for credential management. It explicitly advises against asking users for API keys or tokens, instead using a connection-based model where the Membrane platform handles authentication and token lifecycle server-side with no local secrets stored.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 04:51 PM
Security Audit — agent-trust-hub — bitrise