xata

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the NPM registry to interact with the vendor's platform.
  • [COMMAND_EXECUTION]: Uses the membrane command-line interface to manage logins, create connections, and execute database actions on Xata.
  • [CREDENTIALS_UNSAFE]: Explicitly avoids unsafe credential handling by instructing the agent to use the platform's connection management instead of asking users for API keys or tokens.
  • [DATA_EXFILTRATION]: Facilitates data transfer between the local environment and the Xata serverless database platform as part of its core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 11:24 PM
Security Audit — agent-trust-hub — xata