defastra
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
@membranehq/clipackage from the official NPM registry. This is the vendor's own CLI tool used for managing service integrations. - [COMMAND_EXECUTION]: Several commands utilizing the
membraneCLI are documented to facilitate logging in, connecting to the Defastra service, and executing API actions. - [SAFE]: Authentication is handled securely through the CLI's
logincommand, which uses a browser-based flow or an authorization URL. This prevents the need for hardcoding or manually entering sensitive credentials like API keys within the prompt or skill files.
Audit Metadata