time-tracker-by-ebillity

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package globally via npm. This package is the official command-line interface for the Membrane platform, which is the vendor of this skill.
  • [COMMAND_EXECUTION]: The integration logic relies on executing membrane CLI commands to authenticate users, manage API connections, and run actions. These commands are used as intended for the skill's primary purpose.
  • [DATA_EXFILTRATION]: The skill follows security best practices by encouraging the use of Membrane's connection management system. This approach avoids hardcoding API keys or sensitive credentials locally, as secrets are managed server-side by the Membrane platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 12:51 PM