status-hero
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage globally via npm. This is the official command-line interface provided by the vendor (Membrane) to interact with their platform services. - [COMMAND_EXECUTION]: The skill relies on shell commands to perform authentication, connection management, and action execution. Specifically, it uses the
membranecommand to handle login, list connections, and run actions. These operations are within the intended scope of a CLI-based integration. - [COMMAND_EXECUTION]: Several commands, such as
membrane action list --intent "QUERY"andmembrane action create "DESCRIPTION", incorporate natural language strings as arguments. While this represents a surface for potential command injection if the input strings are sourced from untrusted data, it is the primary mechanism for the tool's intended natural language processing capabilities.
Audit Metadata