bitrise
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally using npm (npm install -g @membranehq/cli@latest). This is the official command-line interface provided by the skill's author to interact with their platform. - [COMMAND_EXECUTION]: The skill relies on executing various
membraneCLI commands to perform its functions, includingmembrane login,membrane connect, andmembrane action run. These are used as intended for the skill's primary purpose. - [SAFE]: The skill follows security best practices for credential management. It explicitly advises against asking users for API keys or tokens, instead using a connection-based model where the Membrane platform handles authentication and token lifecycle server-side with no local secrets stored.
Audit Metadata