reapit
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage via npm. This is a standard installation of the official CLI provided by the vendor (membranedev) to facilitate the integration. - [COMMAND_EXECUTION]: The skill utilizes the
membraneCLI for operations such as logging in, connecting to services, and running actions. These are legitimate uses of tool-calling to interact with a managed platform. - [CREDENTIALS_SAFE]: The skill explicitly advises against asking the user for API keys or tokens, instead directing the agent to use the Membrane connection system which manages authentication lifecycles server-side without local secrets.
Audit Metadata