gocanvas

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the official npm registry. This is a vendor-provided tool required for authentication and service interaction.
  • [COMMAND_EXECUTION]: The skill utilizes membrane CLI commands to list, create, and run GoCanvas actions. This is the primary intended mechanism for the integration's functionality.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure credential management by using membrane login and membrane connect, which handle authentication tokens server-side. This avoids the use of hardcoded keys or local environment variables for sensitive secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:11 PM
Security Audit — agent-trust-hub — gocanvas