privacy-dynamics

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from npm. This is a legitimate tool provided by the vendor for interacting with their platform.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform operations like logging in, creating connections, and running actions. These are standard administrative tasks for managing integrations within the Membrane ecosystem.
  • [REMOTE_CODE_EXECUTION]: The membrane action create functionality allows for the dynamic creation of actions on the Membrane platform based on natural language descriptions. While this involves code generation, it occurs within the vendor's controlled environment and is a core feature of the service.
  • [CREDENTIALS_UNSAFE]: The skill explicitly advises against asking users for API keys or tokens, directing the agent to use the platform's connection management system instead. This is a positive security practice that prevents credential exposure in the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 11:07 PM
Security Audit — agent-trust-hub — privacy-dynamics