proprofs-quiz-maker
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from npm. This is a vendor-provided tool used to facilitate authentication and API interactions with the ProProfs Quiz Maker service. - Evidence:
npm install -g @membranehq/cli@latestin SKILL.md. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI to perform operations such as logging in, connecting to services, and executing actions. These commands are standard for the tool's integration logic. - Evidence: Commands like
membrane login,membrane connect, andmembrane action runare used throughout SKILL.md. - [DATA_EXPOSURE]: The skill implements a secure credential management strategy by delegating authentication to the Membrane platform rather than asking for or storing API keys locally.
- Evidence: Instructions explicitly state "never ask the user for API keys or tokens" and use
membrane connectto manage the OAuth lifecycle.
Audit Metadata