bluesky-by-unshape
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
@membranehq/clipackage from the public NPM registry. This is the official command-line tool for the Membrane platform. - [COMMAND_EXECUTION]: The instructions utilize the
membraneCLI to perform several operations: membrane login: Facilitates user authentication via a browser-based OAuth flow.membrane searchandmembrane connect: Used to discover and initialize the Bluesky connector.membrane action runandmembrane request: Executes specific API actions or generic HTTP requests to the Bluesky service.- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management. It explicitly advises against asking the user for API keys and instead uses the platform's built-in connection system to handle authentication server-side.
- [DATA_EXFILTRATION]: No unauthorized data transmission was detected. Network operations are restricted to communication with the Membrane platform and the Bluesky API as required for the skill's functionality.
Audit Metadata