chatrace
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the official NPM registry. This is the standard command-line interface provided by the vendor (Membrane) to interact with their integration services. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to manage connections and execute actions. These commands are used for legitimate integration purposes, such as searching for available Chatrace actions and triggering them through the Membrane platform. - [SAFE]: The skill avoids storing or requesting sensitive credentials (like API keys) directly. Instead, it utilizes the vendor's managed authentication flow (
membrane loginandmembrane connect), which reduces the risk of credential exposure. No patterns of prompt injection, data exfiltration, or obfuscation were detected.
Audit Metadata