filescom
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill prompts the installation of the
@membranehq/clipackage from the official npm registry. This is the vendor's standard command-line tool for managing integrations. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to execute various operations, including authentication (membrane login), connection management (membrane connect), and action execution (membrane action run). These commands are necessary for the skill's functionality and operate within the vendor's ecosystem. - [DATA_EXFILTRATION]: The skill manages authentication through the Membrane platform, which handles credentials server-side. This follows security best practices by avoiding the storage of raw API keys or tokens within the local environment.
Audit Metadata