datumbox

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI globally via npm install -g @membranehq/cli@latest. This is an official package from the skill vendor used to facilitate authentication and API interactions.
  • [COMMAND_EXECUTION]: The skill utilizes several shell commands via the membrane CLI to manage the lifecycle of integrations, including membrane login, membrane connect, and membrane action run. These are standard operational commands for the platform.
  • [CREDENTIALS_SAFE]: Authentication is handled through a secure browser-based flow (membrane login) or an authorization code. The skill follows best practices by instructing users to let the platform manage credentials rather than hardcoding or manually handling API keys.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 09:41 AM
Security Audit — agent-trust-hub — datumbox