mindspun

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the user to install the Membrane CLI from the official NPM registry. This is a standard procedure for the vendor's platform integration.
  • Evidence: npm install -g @membranehq/cli@latest in SKILL.md.
  • [COMMAND_EXECUTION]: All interaction with the Mindspun service is performed through the membrane CLI tool. This provides a controlled environment for executing actions and managing data.
  • Evidence: Commands such as membrane action list, membrane action create, and membrane action run are used throughout SKILL.md.
  • [SAFE]: The skill implements a robust authentication strategy by using membrane login and membrane connect. This ensures that sensitive API keys or tokens are managed by the Membrane platform and are never exposed within the skill instructions or requested from the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 12:03 PM
Security Audit — agent-trust-hub — mindspun