pushpay
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides users to install and use the
@membranehq/clipackage. This is a vendor-owned tool intended for managing connections and interacting with the platform's API infrastructure. - [SAFE]: Credentials and authentication tokens are managed server-side by the platform. The skill explicitly instructs against asking users for API keys, which follows security best practices for secret management.
- [SAFE]: No patterns of prompt injection, obfuscation, or unauthorized data exfiltration were detected within the skill's instructions or metadata.
Audit Metadata