bump

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the @membranehq/cli package from the NPM registry. This is the official command-line tool provided by the author (Membrane) and is necessary for interacting with their platform.
  • [COMMAND_EXECUTION]: The commands described in the skill are standard operations for the Membrane platform, such as membrane login, membrane connect, and membrane action run. These operations are used as intended for service integration and do not perform unauthorized system changes.
  • [SAFE]: Authentication is managed via the membrane CLI, which uses a browser-based login flow. This is a secure practice that avoids the need for hardcoded API keys or secrets within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 08:42 PM
Security Audit — agent-trust-hub — bump