pushsafer
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the official NPM registry. This is a standard installation of the vendor's primary toolset. - [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Membrane CLI for authentication (
membrane login), connection management (membrane connect), and action execution. These operations are the intended functionality for CLI-based integration. - [DATA_EXPOSURE]: The skill explicitly advises against asking users for API keys, instead using the CLI's internal connection manager to handle credentials securely. This reduces the risk of accidental credential exposure in logs or prompts.
Audit Metadata