scoopit
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@membranehq/clipackage via npm. This is the official command-line tool for the platform and is necessary for the skill's functionality. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform actions such as logging in, listing connections, and running integration tasks. These commands are standard operations for interacting with the Membrane platform. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against asking users for API keys or tokens, directing them instead to use the platform's built-in connection management which handles authentication server-side. This is a security best practice.
Audit Metadata