eversign
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the official NPM registry. This is a legitimate utility provided by the skill's author to manage integrations. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI for various tasks including authentication (membrane login), connection management (membrane connect), and running integration logic (membrane action run). These operations are conducted through the official vendor toolchain. - [CREDENTIALS_SAFE]: The skill correctly implements credential management by utilizing the
membrane connectflow, which handles authentication via the browser and stores tokens securely on the platform side rather than in local files or environment variables.
Audit Metadata