firstup

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Membrane CLI tool.
  • Evidence: npm install -g @membranehq/cli@latest in SKILL.md.
  • Context: This is a standard installation of the vendor's primary tool for service integration.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform operations such as authentication, action discovery, and task execution.
  • Evidence: Commands like membrane login, membrane action list, and membrane action run are documented throughout SKILL.md.
  • Context: These commands represent the core functionality of the skill for interacting with the Firstup API through the Membrane platform.
  • [SAFE]: The skill promotes secure credential management by using a centralized authentication flow.
  • Evidence: Instructions state "never ask the user for API keys or tokens" and recommend letting Membrane handle the auth lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 12:51 PM