semgrep

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official @membranehq/cli package from the NPM registry. This is a standard and safe operation as it targets a vendor-owned resource for the integration's core functionality.
  • [COMMAND_EXECUTION]: The skill uses the membrane CLI to perform actions like connection management and scan execution. These commands are localized to the tool's intended purpose and do not exhibit malicious patterns.
  • [SAFE]: No hardcoded credentials or sensitive file access patterns were detected. Authentication is handled securely through the CLI's own login flow, which avoids exposing secrets in the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 04:10 PM