thepeer
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the @membranehq/cli package from the npm registry. This is the official command-line tool provided by the author (Membrane) to interact with their platform.
- [COMMAND_EXECUTION]: Utilizes shell commands through the membrane CLI to perform operations such as searching for actions, managing connections, and executing API requests.
- [REMOTE_CODE_EXECUTION]: Uses npx to execute the @membranehq/cli package. This is a standard method for ensuring the most up-to-date vendor tools are used for action discovery.
- [SAFE]: Promotes secure credential handling by advising the use of Membrane's managed connections, which avoids the need to ask for or store sensitive API keys within the agent's environment.
Audit Metadata