Zendesk Guide

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 9, 2026, 12:17 AM
• Findings: 0
• Version: 1.0.0

Overview

The SKILL.md and requirements are internally consistent: it instructs installing and using the Membrane CLI to proxy requests to Zendesk Guide and does not ask for unrelated credentials — the primary user-facing risk is that Zendesk data will be routed through a third-party (Membrane) and you must trust that service.

This skill is coherent for interacting with Zendesk Guide via Membrane, but consider the following before installing: - Trust & data flow: Using the skill proxies your Zendesk API calls through Membrane. That means request/response bodies and any sensitive content will traverse Membrane's infrastructure — review their privacy, data retention, and security controls and confirm this is acceptable. - Install provenance: The SKILL.md instructs installing @membranehq/cli globally via npm. Verify the package name, publisher, and npm page (and prefer scoped installs or non-global installs if your org restricts global packages). - Least privilege: Create or test with a non-production Zendesk account or scoped connector where possible to limit exposure while you validate behavior. - Org policy: If you’re in a corporate environment, check with IT/security before installing a global CLI or routing support data through a third-party. If you want a deeper assessment, ask for: the npm package metadata (publisher, latest version checksum), Membrane's security/privacy documentation, or any network egress rules that would apply in your environment.