oh-dear
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage from the public NPM registry. This is a standard dependency for interacting with the Membrane platform and matches the author's infrastructure. - [COMMAND_EXECUTION]: The instructions involve executing various
membraneCLI commands for logging in, connecting to services, and running actions. These are documented, purpose-built commands for the platform's integration logic. - [CREDENTIALS_UNSAFE]: The skill follows secure patterns by delegating authentication to the Membrane CLI and server-side connection management. It explicitly instructs the agent never to ask the user for API keys or tokens, reducing the risk of credential exposure.
Audit Metadata