pactsafe
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official Membrane CLI (
@membranehq/cli) for all PactSafe interactions. This is a well-known tool from the skill's authoring organization. - [SAFE]: The instructions explicitly recommend using the platform's connection model rather than asking users for API keys or tokens, which is a security best practice for managing credentials.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute standard
membraneCLI commands (login, connect, action run, request). These are expected behaviors for a CLI-based integration skill and do not involve arbitrary or dangerous command injection. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from the official npm registry. This is a legitimate dependency for the skill's functionality.
Audit Metadata