tellmoney
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the
@membranehq/clipackage from the NPM registry. This is a legitimate command-line tool provided by the vendor to facilitate the integration. - [COMMAND_EXECUTION]: The skill uses various
membraneCLI commands to manage the lifecycle of the integration, including authentication, connection management, and running actions. These commands are local shell executions intended for the user's environment. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly instructing the agent never to ask users for API keys or tokens, instead using the Membrane platform to manage authentication server-side.
- [DYNAMIC_EXECUTION]: The skill utilizes the
membrane action createfunctionality, which generates new integration logic on the platform based on natural language descriptions. While this is dynamic, it is a core feature of the vendor's middleware service.
Audit Metadata