moesif
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@membranehq/clipackage from the NPM registry. - Evidence: Instructions for
npm install -g @membranehq/cli@latestand usage ofnpx @membranehq/cli@latestfor CLI interactions. - [COMMAND_EXECUTION]: Local shell commands are used to manage connections and execute API actions through the Membrane platform.
- Evidence: Commands such as
membrane login,membrane connect, andmembrane action runare provided to facilitate Moesif integration. - [CREDENTIALS_UNSAFE]: The skill provides explicit guidance on avoiding the capture of sensitive secrets.
- Evidence: The instructions state: 'never ask the user for API keys or tokens' and 'Let Membrane handle credentials'.
- [DATA_EXFILTRATION]: Network traffic is restricted to the legitimate functional requirements of the integration.
- Evidence: Communication occurs exclusively between the local environment, the Membrane platform, and Moesif's API endpoints for synchronization and monitoring.
Audit Metadata