people-data-labs
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/clipackage via npm. This is a scoped package belonging to the verified vendor (Membrane) and is the standard method for interacting with their services. - [COMMAND_EXECUTION]: The instructions involve running the
membraneCLI tool for login, searching, and executing actions. These commands are purpose-specific to the integration and do not involve executing arbitrary or untrusted code. - [CREDENTIALS_UNSAFE]: The skill correctly uses the platform's authentication flow (
membrane loginandmembrane connect) instead of requesting hardcoded API keys or secrets from the user. This ensures that sensitive credentials are managed securely by the Membrane platform. - [DATA_EXFILTRATION]: Data access is facilitated through the People Data Labs API via Membrane's proxy. The skill does not contain instructions to transmit sensitive user data to unauthorized third-party locations.
Audit Metadata