firmalyzer-iotvas-api

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @membranehq/cli package from the npm registry. This is a standard utility provided by the vendor (Membrane) to manage service integrations and authentication.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands through the membrane CLI to perform actions such as membrane action run and membrane request. These are used to communicate with the Firmalyzer API and manage the integration lifecycle.
  • [SAFE]: Security best practices are followed regarding credential management. The skill explicitly instructs the agent to use Membrane's built-in connection system rather than asking the user for API keys or tokens, which prevents secret exposure in logs or local environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 02:43 PM