taxjar

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the @membranehq/cli package globally via npm. This is a vendor-provided tool used to facilitate communication between the agent and the TaxJar service via the Membrane platform.
  • [COMMAND_EXECUTION]: Employs shell commands through the membrane CLI to handle authentication (membrane login), connection management (membrane connect), and action execution (membrane action run).
  • [SAFE]: The skill promotes secure development practices by explicitly instructing the agent to never ask the user for API keys or tokens, relying instead on Membrane's server-side connection management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 07:27 PM
Security Audit — agent-trust-hub — taxjar