lumigo
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official @membranehq/cli package from the npm registry. As this is the verified tool for the service provider, it is considered a safe and standard dependency for the skill's operation.
- [COMMAND_EXECUTION]: The instructions utilize the membrane CLI to manage authentication (login), connection setup (connect), and task execution (action run). These commands are part of the intended integration workflow for the platform.
- [CREDENTIALS_SAFE]: The skill demonstrates positive security posture by utilizing Membrane's server-side connection management for authentication, which avoids the exposure of hardcoded API keys or tokens in the local environment.
Audit Metadata