tito

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the official Membrane command-line interface via npm install -g @membranehq/cli@latest.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution of the membrane CLI for operations including login, connection setup, and action execution.
  • [REMOTE_CODE_EXECUTION]: Provides functionality to dynamically create actions (membrane action create) which are built and executed on the Membrane service based on user-provided descriptions.
  • [SAFE]: Demonstrates secure handling of sensitive data by utilizing Membrane's server-side credential management, explicitly advising against requesting user tokens or API keys directly.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 05:09 PM
Security Audit — agent-trust-hub — tito