financialforce

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the membrane CLI to perform operations such as user authentication (membrane login), service connection (membrane connect), and data record management (membrane action run). These commands are standard for interacting with the vendor's platform.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the @membranehq/cli package from the npm registry. This package is owned by the skill's author and is necessary for the intended functionality.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly instructing the agent not to ask users for API keys or secrets, instead relying on Membrane's managed connection system to handle sensitive credentials server-side.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 08:58 AM