livekit
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally via npm. This is a vendor-provided tool used to facilitate the integration. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations such as authentication, connection management, and action execution. These commands are integral to the stated purpose of the skill. - [CREDENTIALS_UNSAFE]: The skill demonstrates a secure approach to authentication by using a CLI-based login flow and explicitly advising against asking users for API keys or tokens.
- [INDIRECT_PROMPT_INJECTION]: As the skill processes data from external actions via
membrane action run, it has a standard surface for indirect prompt injection. However, this is a common characteristic of integration skills and no specific vulnerabilities were found in the instructions.
Audit Metadata