status-hero

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally via npm. This is the official command-line interface provided by the vendor (Membrane) to interact with their platform services.
  • [COMMAND_EXECUTION]: The skill relies on shell commands to perform authentication, connection management, and action execution. Specifically, it uses the membrane command to handle login, list connections, and run actions. These operations are within the intended scope of a CLI-based integration.
  • [COMMAND_EXECUTION]: Several commands, such as membrane action list --intent "QUERY" and membrane action create "DESCRIPTION", incorporate natural language strings as arguments. While this represents a surface for potential command injection if the input strings are sourced from untrusted data, it is the primary mechanism for the tool's intended natural language processing capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 05:37 PM