finapi

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the @membranehq/cli package from npm, which is a vendor-owned resource for the Membrane platform.
  • [CREDENTIALS_UNSAFE]: The instructions demonstrate safe secret management by directing the agent to use managed server-side connections rather than requesting sensitive API keys or tokens from the user.
  • [COMMAND_EXECUTION]: The skill utilizes the official Membrane CLI to perform financial data operations, which is consistent with its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:28 PM
Security Audit — agent-trust-hub — finapi