gladly

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI tool using @membranehq/cli@latest via npm. This is a verified vendor resource belonging to the skill author's organization.
  • [COMMAND_EXECUTION]: The skill uses various membrane CLI commands to perform operations like logging in, connecting to Gladly, and running actions. These are standard operations for the intended functionality of the integration.
  • [DATA_EXPOSURE]: The skill explicitly advises against asking users for sensitive credentials such as API keys, instead utilizing a browser-based OAuth/connection flow managed by the platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external actions (membrane action run). While this represents a potential data ingestion surface, the platform's architecture and the use of structured schemas mitigate common injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 07:09 AM
Security Audit — agent-trust-hub — gladly