semgrep
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official @membranehq/cli package from the NPM registry. This is a standard and safe operation as it targets a vendor-owned resource for the integration's core functionality.
- [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform actions like connection management and scan execution. These commands are localized to the tool's intended purpose and do not exhibit malicious patterns.
- [SAFE]: No hardcoded credentials or sensitive file access patterns were detected. Authentication is handled securely through the CLI's own login flow, which avoids exposing secrets in the skill's instructions.
Audit Metadata