conjur

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Membrane CLI to interact with Conjur services. This includes commands for authentication (membrane login), connection management (membrane connect), and executing secrets-management actions (membrane action run). These operations are the primary intended function of the skill.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI globally using npm install -g @membranehq/cli@latest. This is a standard installation procedure for the vendor's own tooling and is required for the skill to function.\n- [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The skill specifically discourages the manual handling of API keys or tokens, instead utilizing Membrane's managed connection system to handle authentication server-side.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 08:18 AM
Security Audit — agent-trust-hub — conjur