livekit

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally via npm. This is a vendor-provided tool used to facilitate the integration.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform operations such as authentication, connection management, and action execution. These commands are integral to the stated purpose of the skill.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates a secure approach to authentication by using a CLI-based login flow and explicitly advising against asking users for API keys or tokens.
  • [INDIRECT_PROMPT_INJECTION]: As the skill processes data from external actions via membrane action run, it has a standard surface for indirect prompt injection. However, this is a common characteristic of integration skills and no specific vulnerabilities were found in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 04:46 PM
Security Audit — agent-trust-hub — livekit