bamboohr
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the @membranehq/cli package from the NPM registry, which is the official command-line utility for the vendor's platform.
- [COMMAND_EXECUTION]: Relies on the membrane CLI to perform all operational tasks, including user authentication (membrane login), connector setup (membrane connect), and executing API actions (membrane action run).
- [SAFE]: The skill follows security best practices by delegating credential management to the Membrane platform and utilizing a proxy for API requests, ensuring no sensitive tokens are handled or stored locally by the skill code.
Audit Metadata