sapling

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @membranehq/cli package from the public npm registry. This is the official command-line interface provided by the platform vendor (Membrane) and is required for the skill to function correctly.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform administrative and operational tasks such as authenticating, creating connections, and executing actions. These commands are standard for managing integrations within the Membrane ecosystem.
  • [SAFE]: The skill demonstrates safe credential management by explicitly advising against asking users for API keys or tokens, instead delegating authentication lifecycle management to the Membrane platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 05:25 PM
Security Audit — agent-trust-hub — sapling