podio
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage from npm. This is a legitimate tool provided by the vendor (Membrane) to manage API connections and authentication.\n- [COMMAND_EXECUTION]: The instructions utilize themembranecommand-line tool to perform administrative tasks such as logging in, creating connections, and executing API actions against Podio. This is the intended and standard use of the software.\n- [SAFE]: No malicious behaviors, such as prompt injection, data exfiltration, or obfuscation, were detected. The skill follows security best practices by using a proxy-based authentication mechanism that protects API keys from being exposed in plain text or local storage.
Audit Metadata