botpenguin
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the official NPM registry, which is the expected tool for this vendor's ecosystem. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations such as logging in, connecting to BotPenguin, and executing actions. These are standard operations for the tool's intended use. - [CREDENTIALS_SAFE]: Authentication is handled through the
membrane loginandmembrane connectcommands, which use OAuth-like flows. This avoids the need for hardcoding or manually handling sensitive API keys within the agent's environment. - [DATA_EXFILTRATION]: Network traffic is directed to the vendor's own infrastructure (
getmembrane.com) and the target service (botpenguin.com), which is consistent with the skill's stated purpose.
Audit Metadata