privacy-dynamics
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from npm. This is a legitimate tool provided by the vendor for interacting with their platform. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations like logging in, creating connections, and running actions. These are standard administrative tasks for managing integrations within the Membrane ecosystem. - [REMOTE_CODE_EXECUTION]: The
membrane action createfunctionality allows for the dynamic creation of actions on the Membrane platform based on natural language descriptions. While this involves code generation, it occurs within the vendor's controlled environment and is a core feature of the service. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against asking users for API keys or tokens, directing the agent to use the platform's connection management system instead. This is a positive security practice that prevents credential exposure in the agent's context.
Audit Metadata