bubble
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @membranehq/cli package. This is the official command-line interface provided by the vendor (membranedev) to interact with their platform services.
- [COMMAND_EXECUTION]: The skill instructions involve executing commands via the membrane CLI tool. These commands are used to perform legitimate application management tasks such as logging in, connecting to the Bubble API, and running predefined actions.
- [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration or credential harvesting were detected. The skill specifically advises against manual handling of secrets, directing the agent to use the platform's secure connection mechanism instead.
Audit Metadata