piano
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
membraneCLI tool to manage authentications, list connections, and execute actions. - [EXTERNAL_DOWNLOADS]: Installs the
@membranehq/cliglobal package from the official NPM registry. This tool is provided by the skill's author (Membrane) to facilitate integration. - [REMOTE_CODE_EXECUTION]: Employs
membrane action createto dynamically generate integration logic based on natural language descriptions. While this involves code generation, it is a documented core feature of the vendor's platform. - [SAFE]: Follows security best practices by delegating credential management to the Membrane platform instead of requesting secrets directly from the user.
Audit Metadata