filescom

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill prompts the installation of the @membranehq/cli package from the official npm registry. This is the vendor's standard command-line tool for managing integrations.
  • [COMMAND_EXECUTION]: The skill utilizes the membrane CLI to execute various operations, including authentication (membrane login), connection management (membrane connect), and action execution (membrane action run). These commands are necessary for the skill's functionality and operate within the vendor's ecosystem.
  • [DATA_EXFILTRATION]: The skill manages authentication through the Membrane platform, which handles credentials server-side. This follows security best practices by avoiding the storage of raw API keys or tokens within the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 03:40 PM