emelia
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally via NPM. This is a vendor-provided utility tool necessary for interacting with the Membrane platform. - [COMMAND_EXECUTION]: The skill uses several shell commands via the
membraneCLI to manage connections and execute actions. These includemembrane login,membrane connect, andmembrane action run. These operations are limited to the scope of managing the Emelia integration. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill leverages the Membrane platform to handle authentication server-side, which prevents the need for local storage of sensitive API keys or tokens.
- [DATA_EXPOSURE]: While the skill interacts with email campaign data, it does so through the Membrane CLI, which provides an abstraction layer for secure data handling and doesn't reveal sensitive configuration files (like SSH or AWS keys).
Audit Metadata