zixflow

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the public NPM registry. This is a vendor-provided tool required for the skill's functionality.
  • [COMMAND_EXECUTION]: The skill uses various membrane CLI commands to authenticate users, manage service connections, and execute actions. These commands are the intended method of interaction for the platform.
  • [CREDENTIALS_UNSAFE]: The skill implements a secure authentication flow using the Membrane CLI's login and connect commands. It explicitly advises against asking users for raw API keys or tokens, following the principle of least privilege through managed connections.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 03:09 PM