nicereply

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the @membranehq/cli package from the official NPM registry. This is a standard installation for the author's official command-line tool.
  • [COMMAND_EXECUTION]: Instructs the agent to use the membrane CLI for managing Nicereply connections and executing API actions. These operations are within the expected scope of the skill's functionality.
  • [CREDENTIALS_UNSAFE]: The skill implements a secure authentication workflow using membrane login and membrane connect, which handles tokens via browser-based OAuth. This approach follows the best practice of avoiding local storage or manual handling of sensitive API keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 09:30 PM