code-climate
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill instructions follow best practices for secure API integration, specifically advising against the use of raw API keys and utilizing a managed authentication system.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
@membranehq/clipackage from npm. This is a vendor-owned resource used to facilitate communication between the agent and the Code Climate API through the Membrane platform. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform actions like searching for connectors, connecting accounts, and running API actions. All commands are standard for the intended integration logic.
Audit Metadata