clover
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official Membrane CLI (
@membranehq/cli) for all operations. This approach centralizes authentication and API interaction on the Membrane platform, ensuring that sensitive credentials like API keys or tokens are not stored or managed by the AI agent locally. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the official npm registry. This is a standard procedure for tools provided by the vendor (membranehq). - [COMMAND_EXECUTION]: The skill involves executing shell commands to interact with the service (e.g.,
membrane login,membrane action run). These are documented, functional commands required for the skill's operation and do not exhibit malicious patterns.
Audit Metadata