wave-financial
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI from the official NPM registry (
@membranehq/cli). This is a standard development practice for using the vendor's platform. - [COMMAND_EXECUTION]: The skill provides various
membraneCLI commands for logging in, connecting to services, and running actions. These are legitimate administrative and operational commands for the intended service integration. - [CREDENTIALS_UNSAFE]: The skill explicitly follows security best practices by advising users never to handle API keys or tokens directly, instead using Membrane's connection management system which handles authentication server-side.
- [DATA_EXFILTRATION]: No unauthorized data transmission was detected. Network operations are directed through the Membrane proxy to the official Wave Financial API for legitimate business data management.
Audit Metadata