firstup
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Membrane CLI tool.
- Evidence:
npm install -g @membranehq/cli@latestin SKILL.md. - Context: This is a standard installation of the vendor's primary tool for service integration.
- [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations such as authentication, action discovery, and task execution. - Evidence: Commands like
membrane login,membrane action list, andmembrane action runare documented throughout SKILL.md. - Context: These commands represent the core functionality of the skill for interacting with the Firstup API through the Membrane platform.
- [SAFE]: The skill promotes secure credential management by using a centralized authentication flow.
- Evidence: Instructions state "never ask the user for API keys or tokens" and recommend letting Membrane handle the auth lifecycle.
Audit Metadata