calltrackingmetrics
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the Membrane CLI to interact with the CallTrackingMetrics API. The installation of the CLI (
@membranehq/cli) is performed from the vendor's own package, which is a verified resource. Authentication and credential management are handled by the Membrane platform, preventing local storage of sensitive keys. While the skill processes external data such as call logs and SMS, which is a potential surface for indirect prompt injection, this is inherent to the integration's purpose and no malicious patterns were identified in the instruction logic.
Audit Metadata