woopra
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the Membrane CLI tool (
@membranehq/cli) from the npm registry. This is a legitimate tool provided by the vendor (membranedev) to interact with their platform services. - [COMMAND_EXECUTION]: The skill uses various shell commands (
membrane login,membrane connect,membrane action run) to manage the Woopra integration. These commands are part of the intended workflow for authenticating with the platform and executing analytics queries. - [DATA_EXFILTRATION]: The skill retrieves customer journey data, profiles, and reports from Woopra. While this involves processing external data, the skill uses the vendor's secure connection management system and does not exhibit patterns of unauthorized data leakage.
Audit Metadata