customerio

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from NPM. This is the official tool provided by the vendor (membranedev) to interact with their services.
  • [COMMAND_EXECUTION]: It employs the membrane CLI to perform operations such as authentication, connection listing, and action execution. These commands are the intended mechanism for interacting with the Membrane ecosystem.
  • [REMOTE_CODE_EXECUTION]: The skill documents the ability to dynamically create and run new actions on the Membrane platform via the CLI (membrane action create and membrane action run). This is a core feature of the platform's automation capabilities.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure authentication by using Membrane's server-side connection management, explicitly advising against asking users for or manually handling API keys and tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 06:50 PM
Security Audit — agent-trust-hub — customerio