sage-people
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Membrane CLI tool from the NPM registry (
@membranehq/cli). This is a legitimate dependency provided by the platform vendor for interacting with their services. - [COMMAND_EXECUTION]: The skill uses several shell commands via the
membraneCLI to manage authentication, search for capabilities, and execute HR management tasks. These commands are scoped to the Membrane ecosystem and do not involve sensitive local file access or unauthorized network calls. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
membrane action createfeature, which dynamically generates and deploys integration logic based on natural language descriptions. While this involves code generation, it is the primary intended function of the Membrane platform and occurs within the vendor's managed environment.
Audit Metadata