stripo

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @membranehq/cli package from the NPM registry. This is an official vendor-provided tool used for authentication and interacting with the Membrane platform.
  • [COMMAND_EXECUTION]: The skill utilizes several shell commands to manage the integration workflow, including global package installation (npm install -g), authentication (membrane login), and action execution (membrane action run). These are standard operations for the Membrane ecosystem.
  • [CREDENTIALS_UNSAFE]: The skill correctly avoids requesting or storing hardcoded credentials. It explicitly directs users to use Membrane's connection management system, which handles authentication server-side without exposing secrets to the agent or local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 04:04 PM