zoho-crm
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official Membrane CLI utility from the npm registry, which is a legitimate tool provided by the vendor for managing integrations.
- Evidence:
npm install -g @membranehq/cli@latestin SKILL.md. - [CREDENTIALS_UNSAFE]: Authentication is handled securely through the Membrane CLI's login and connection flow, ensuring that API keys and tokens are managed server-side rather than being hardcoded or exposed in local files.
- Evidence:
membrane loginandmembrane connectflows described in SKILL.md. - [COMMAND_EXECUTION]: The provided commands are limited to the operation of the
membraneCLI for CRM tasks such as listing modules, searching for actions, and executing records management. No arbitrary or dangerous command execution was found.
Audit Metadata