resurface
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the @membranehq/cli package from the NPM registry, which is the official tool for the vendor's platform.
- [COMMAND_EXECUTION]: The skill uses shell commands like membrane login and membrane action run to manage connections and interact with data.
- [REMOTE_CODE_EXECUTION]: The skill uses npx to run the latest version of the @membranehq/cli tool, which involves dynamic downloading and execution of code from the NPM registry.
Audit Metadata