harvest
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Membrane CLI tool (@membranehq/cli) from the public NPM registry. This tool is provided by the vendor to facilitate API interactions.
- [COMMAND_EXECUTION]: Shell commands are used to invoke the membrane CLI for authentication (membrane login), connection setup (membrane connect), and data management (membrane action run).
- [SAFE]: The skill avoids hardcoding or requesting sensitive credentials by using a secure, platform-mediated authentication flow. It explicitly advises against asking users for API tokens, which aligns with security best practices for secret management.
Audit Metadata