waitlist

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @membranehq/cli package from the official npm registry. This is a documented dependency required for the skill to interact with the Membrane platform.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands via the membrane CLI to manage connections and execute actions. These commands are part of the primary functionality for integrating with the Waitlist service.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill explicitly instructs the agent to use the membrane login and membrane connect workflows, which handle authentication through a secure, platform-managed process.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses via the membrane action run and list commands. While this presents a standard input surface for untrusted data, the skill uses these as structured inputs for its intended automation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:53 PM
Security Audit — agent-trust-hub — waitlist