stripo
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the NPM registry. This is an official vendor-provided tool used for authentication and interacting with the Membrane platform. - [COMMAND_EXECUTION]: The skill utilizes several shell commands to manage the integration workflow, including global package installation (
npm install -g), authentication (membrane login), and action execution (membrane action run). These are standard operations for the Membrane ecosystem. - [CREDENTIALS_UNSAFE]: The skill correctly avoids requesting or storing hardcoded credentials. It explicitly directs users to use Membrane's connection management system, which handles authentication server-side without exposing secrets to the agent or local environment.
Audit Metadata