ontask
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to install the
@membranehq/clipackage from the public NPM registry. This package is the official command-line interface provided by the vendor (Membrane) to facilitate platform integrations. - [COMMAND_EXECUTION]: The instructions utilize the
membraneCLI to perform operations such as authentication, connection management, and workflow action execution. These commands are standard for the intended integration logic and do not involve unauthorized privilege escalation or persistence mechanisms. - [CREDENTIALS_UNSAFE]: The skill employs a secure authentication flow where credentials and tokens are managed server-side by the Membrane platform via the
membrane loginandmembrane connectcommands. This approach prevents the exposure of sensitive API keys or secrets within the agent's environment or the skill's source code.
Audit Metadata