kombo

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package via npm. This is a recognized vendor resource from the author 'membrane' used to interact with their platform.
  • [COMMAND_EXECUTION]: Provides standard CLI commands for authentication, service connection, and action execution. These commands are essential for the documented functionality of the Membrane integration tool.
  • [CREDENTIALS_UNSAFE]: Adheres to security best practices by utilizing the membrane login flow for authentication, explicitly instructing users to avoid manual handling of API keys or tokens.
  • [DATA_EXFILTRATION]: No suspicious data exfiltration or unauthorized network communication patterns were detected. Network operations are restricted to the documented vendor service.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 07:37 PM
Security Audit — agent-trust-hub — kombo