html-to-image
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
@membranehq/clipackage from the official NPM registry. As this is a tool provided by the skill's author (membranedev), it is a standard dependency for the intended functionality. - [COMMAND_EXECUTION]: All operations are executed through the
membraneCLI tool. These commands are used to manage authentication, list service actions, and run specific integration tasks (e.g., generating images). The usage patterns are consistent with the tool's intended purpose. - [CREDENTIALS_UNSAFE]: The skill explicitly follows best practices for secret management by instructing the user to create connections through the platform rather than handling API keys or tokens locally. This design minimizes the risk of credential exposure within the agent's environment.
Audit Metadata