skills/membranedev/application-skills/deno-a-secure-runtime-for-javascript-and-typescript/Gen Agent Trust Hub
deno-a-secure-runtime-for-javascript-and-typescript
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage from the NPM registry. This is the official command-line interface for the vendor's platform and is required for the skill to function. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations such as authentication, searching for connectors, and running actions. These commands are executed locally to facilitate integration with Deno services. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly advising against asking for or storing API keys locally, instead utilizing a browser-based OAuth/OIDC flow (
membrane login) and server-side credential management. - [REMOTE_CODE_EXECUTION]: The skill allows running Deno actions and proxying requests to endpoints. While this involves executing logic via the Deno runtime, it is the primary intended purpose of the skill and is gated by the user's own Membrane connection and authentication.
Audit Metadata