smtp2go
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the Membrane CLI tool (
@membranehq/cli) from the official NPM registry. As this tool is provided by the same vendor as the skill author, it is considered a legitimate dependency for the skill's functionality. - [COMMAND_EXECUTION]: The skill instructs the agent to use the
membraneCLI for authentication, connection management, and running API actions. These commands are standard for the platform and do not involve unauthorized privilege escalation or suspicious shell operations. - [DATA_EXFILTRATION]: The skill's architecture centralizes authentication and credential management on the Membrane server, reducing the risk of local credential exposure. It explicitly advises against asking users for API keys, which is a secure practice.
Audit Metadata