zixflow
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the public NPM registry. This is a vendor-provided tool required for the skill's functionality. - [COMMAND_EXECUTION]: The skill uses various
membraneCLI commands to authenticate users, manage service connections, and execute actions. These commands are the intended method of interaction for the platform. - [CREDENTIALS_UNSAFE]: The skill implements a secure authentication flow using the Membrane CLI's
loginandconnectcommands. It explicitly advises against asking users for raw API keys or tokens, following the principle of least privilege through managed connections.
Audit Metadata