dart

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the NPM registry. This is a legitimate utility provided by the vendor to interact with the Membrane platform.
  • [COMMAND_EXECUTION]: Multiple shell commands are utilized via the installed membrane CLI to manage the lifecycle of Dart integrations, including authentication (membrane login), service connection (membrane connect), and running automated actions (membrane action run).
  • [COMMAND_EXECUTION]: The skill utilizes the membrane action create command to generate new integration logic on the vendor's platform based on user-provided descriptions. This logic is executed within the vendor's managed environment.
  • [COMMAND_EXECUTION]: The skill explicitly instructs the agent to use Membrane for external communication to avoid direct handling of sensitive API keys or tokens, leveraging the platform's built-in credential management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 01:44 AM
Security Audit — agent-trust-hub — dart