workday
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI tool (
@membranehq/cli) from the official npm registry. This is a standard procedure for this vendor's tools. - [COMMAND_EXECUTION]: The skill uses shell commands via the Membrane CLI to manage connections, list actions, and execute API requests. These commands are part of the intended functionality and do not involve arbitrary or malicious execution.
- [SAFE]: The skill follows security best practices by explicitly instructing the agent never to ask users for API keys or tokens, instead delegating credential management to the Membrane platform's server-side auth lifecycle. All external resources (npm packages, homepage, and repository) belong to the verified author 'membranedev'.
Audit Metadata