sap-concur
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill utilizes the Membrane CLI for all interactions with SAP Concur. This approach ensures that sensitive credentials and authentication tokens are managed server-side by the Membrane platform, reducing the risk of local credential exposure.
- [SAFE]: The documentation includes explicit best practices advising against requesting API keys or tokens from users, which aligns with secure development standards.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/cliNode.js package. This is a verified vendor package necessary for the skill's core functionality of communicating with the Membrane platform.
Audit Metadata