degreed
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes its own vendor-specific CLI tool (
@membranehq/cli) for all interactions with the Degreed API. The use of vendor-owned resources is consistent with the skill's stated purpose. - [SAFE]: Secure credential management is implemented via the
membrane loginandmembrane connectworkflows. The instructions explicitly advise against asking users for secrets, instead relying on server-side authentication lifecycle management. - [SAFE]: Network operations are performed through a managed proxy (
membrane request), which automatically handles authentication headers and token refreshing, reducing the risk of credential exposure in request logs or command history.
Audit Metadata