plivo
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI via npm using the official package
@membranehq/cli@latest. This is a verified vendor package and is considered safe practice for using the intended platform. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against asking users for API keys or tokens. It uses the
membrane loginandmembrane connectworkflows which handle authentication server-side, preventing local secret exposure. - [COMMAND_EXECUTION]: The skill includes several CLI commands for the
membranetool. These are standard operational commands for the platform (login, connect, action list/run) and do not involve arbitrary shell execution or unsafe user input interpolation. - [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were detected. Network operations are confined to the official Membrane infrastructure for the purpose of executing Plivo actions.
Audit Metadata