document360

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the NPM registry. This is a vendor-owned resource required for the skill's operation.
  • [COMMAND_EXECUTION]: The skill uses the membrane command-line interface to perform all operations, including authentication, connection management, and executing Document360 actions.
  • [SAFE]: Authentication is handled securely through the vendor's CLI (membrane login), which uses browser-based OAuth or authorization codes, avoiding the need for hardcoded credentials or manual secret handling by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 11:07 PM
Security Audit — agent-trust-hub — document360