readme-com

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @membranehq/cli package globally from the official npm registry. This is a legitimate dependency provided by the platform vendor for interacting with their service.
  • [COMMAND_EXECUTION]: The skill utilizes several CLI commands (e.g., membrane login, membrane connect, membrane action run) to manage the integration lifecycle. These operations are performed through the vendor's official binary and are restricted to managing service connections and documentation data.
  • [REMOTE_CODE_EXECUTION]: The membrane action create command is documented as a way to generate new integration logic via natural language. This is a core feature of the Membrane platform for creating automated workflows and is used as intended within the skill's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 03:20 AM
Security Audit — agent-trust-hub — readme-com