piloterr

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions prompt the installation of the @membranehq/cli package from the official npm registry. This is the vendor's standard tool for executing integration logic.
  • [COMMAND_EXECUTION]: The skill utilizes the membrane command-line interface to perform operations such as searching for actions, running predefined tasks, and sending proxied HTTP requests to the Piloterr API.
  • [SAFE]: Credential management is handled securely through the platform's CLI (membrane login and membrane connect), ensuring that sensitive API tokens are never exposed to the agent or stored within the skill instructions.
  • [SAFE]: The skill processes data from external API endpoints (Piloterr). Although this creates a surface for data ingestion, it is the primary intended function of the skill and does not involve unsafe execution of that data.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 02:43 AM