codescene

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the @membranehq/cli package globally from the npm registry, which is a required tool for interacting with the Membrane platform.
  • [COMMAND_EXECUTION]: Utilizes various membrane CLI commands to manage the integration lifecycle, including membrane login for authentication, membrane connect for establishing service links, and membrane action run for executing specific CodeScene operations.
  • [SAFE]: Employs secure credential management practices by delegating authentication and token handling to the Membrane platform. The skill explicitly advises against asking users for API keys, instead utilizing managed 'connections' to keep secrets out of the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:48 AM
Security Audit — agent-trust-hub — codescene