wobaka
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the official NPM registry. This is a legitimate utility provided by the skill author (membranedev) to facilitate communication with their platform. - [COMMAND_EXECUTION]: The skill uses shell commands to interact with the
membraneCLI for logging in, connecting to services, and running actions. These operations are transparent and necessary for the intended functionality. - [SAFE]: The skill explicitly advises against asking the user for API keys or tokens, directing the agent to use Membrane's connection management system which handles credentials server-side. This reduces the risk of credential exposure.
Audit Metadata