mono

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI (@membranehq/cli) globally via npm. This package is the official tool provided by the skill's authoring organization for interacting with their platform.
  • [COMMAND_EXECUTION]: The skill relies on executing membrane CLI commands (e.g., membrane login, membrane connect, membrane action run) to manage financial data. These operations are within the scope of the skill's stated purpose of financial account automation.
  • [SAFE]: The skill implements secure credential management by using Membrane's server-side connection handling. This approach prevents the need for the AI agent to handle or store sensitive API keys and tokens locally, which is a security best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 08:29 PM
Security Audit — agent-trust-hub — mono