cliniko

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the public npm registry. This is the official command-line tool for the Membrane platform, which is the service this skill is designed to interact with.
  • [COMMAND_EXECUTION]: The skill utilizes a series of membrane CLI commands (e.g., membrane login, membrane connect, membrane action run) to perform its functions. These commands are standard operations for managing the integration lifecycle within the Membrane environment.
  • [CREDENTIALS_UNSAFE]: Security is maintained by using a delegated authentication flow. The skill explicitly advises against asking the user for API keys or tokens, instead using membrane login to handle authentication via a browser-based flow or an authorization code.
  • [DATA_EXFILTRATION]: No unauthorized data transmission patterns were found. The skill operates within the scope of the Cliniko and Membrane platforms to manage medical practice data as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 02:49 PM
Security Audit — agent-trust-hub — cliniko