perigon
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @membranehq/cli package from the official NPM registry. This is an official tool provided by the vendor (Membrane) for managing platform integrations and authenticated requests.
- [COMMAND_EXECUTION]: Utilizes the membrane CLI to perform API requests and manage connections. This approach follows security best practices by centralizing authentication logic and credential refresh within a managed environment.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission or credential exposure was found. The skill explicitly directs agents to let the platform handle credentials, ensuring that API keys are not requested from or stored by the user.
Audit Metadata