celigo
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/cliglobal package from the official NPM registry. This is a legitimate utility provided by the vendor to facilitate secure API communication and identity management. - [COMMAND_EXECUTION]: The skill uses shell commands to interact with the installed
membraneCLI. These commands perform routine operations such as authenticating the user, searching for Celigo connectors, and executing integration actions. - [SAFE]: The implementation demonstrates strong security practices by delegating credential management to a trusted platform. By using
membrane loginand themembrane requestproxy, the skill avoids the need for hardcoded secrets or requesting sensitive tokens from the user. Communication with external Celigo endpoints is managed through a proxy that automatically handles authentication headers and token refreshes.
Audit Metadata