ontask

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the user to install the @membranehq/cli package from the public NPM registry. This package is the official command-line interface provided by the vendor (Membrane) to facilitate platform integrations.
  • [COMMAND_EXECUTION]: The instructions utilize the membrane CLI to perform operations such as authentication, connection management, and workflow action execution. These commands are standard for the intended integration logic and do not involve unauthorized privilege escalation or persistence mechanisms.
  • [CREDENTIALS_UNSAFE]: The skill employs a secure authentication flow where credentials and tokens are managed server-side by the Membrane platform via the membrane login and membrane connect commands. This approach prevents the exposure of sensitive API keys or secrets within the agent's environment or the skill's source code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 09:50 PM