lyanthe

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli Node package from the official registry. This is a vendor-owned resource (membranedev) used for managing integrations within the Membrane ecosystem.
  • [REMOTE_CODE_EXECUTION]: Employs npx to download and execute the latest version of the Membrane CLI for discovering available actions.
  • [COMMAND_EXECUTION]: The instructions guide the agent to use several shell commands (e.g., membrane login, membrane connection list, membrane action run) to manage data and automate workflows. These are standard operations for a CLI-based integration tool.
  • [CREDENTIALS_UNSAFE]: The skill follows secure credential management practices by explicitly instructing the agent to never ask for API keys or tokens, instead using a managed 'Connection' model where secrets are handled server-side.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 05:38 PM
Security Audit — agent-trust-hub — lyanthe