memberful

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the installation of the @membranehq/cli package via npm. This is the official command-line interface for the Membrane platform, which the skill uses to facilitate the Memberful integration.
  • [COMMAND_EXECUTION]: The skill uses local shell commands to interact with the installed membrane CLI. These commands handle authentication, connection management, and action execution. The use of shell commands is the primary intended method for this skill's functionality.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates excellent security posture by explicitly instructing the agent to never ask the user for API keys or tokens. Instead, it utilizes membrane login and membrane connect, which manage the authentication lifecycle server-side, ensuring no sensitive secrets are stored or handled directly within the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 11:22 PM
Security Audit — agent-trust-hub — memberful