lazada
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally using npm. This is a standard installation procedure for the Membrane platform's official tooling to facilitate API interactions.
- [COMMAND_EXECUTION]: The instructions involve running several membrane CLI commands, such as membrane login, membrane connection ensure, and membrane action run. These commands are necessary for the skill's functionality and are used in accordance with the vendor's documented workflows for secure authentication and API management.
- [DATA_EXPOSURE]: The skill follows security best practices by explicitly advising against asking users for API keys or tokens. Instead, it uses a connection-based model where credentials are managed server-side by the Membrane platform, reducing the risk of local secret exposure.
Audit Metadata