coupa-pay
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Membrane CLI package (
@membranehq/cli) from the public npm registry. This is a standard dependency for the tool's functionality and originates from the vendor's verified namespace. - [COMMAND_EXECUTION]: Several CLI commands are utilized to manage the lifecycle of the integration, including
membrane login,membrane connect, andmembrane action. These commands are used to authenticate the user and execute specific tasks within the Coupa Pay environment. - [CREDENTIALS_SAFE]: The skill follows security best practices by explicitly instructing users to let the platform handle credentials rather than asking for API keys or tokens. No sensitive credentials or secrets are hardcoded in the instructions.
- [DATA_EXPOSURE]: No sensitive local file access or unauthorized network exfiltration patterns were detected. Communication is routed through the vendor's established CLI and platform.
Audit Metadata