扫描报告
0 /100
flagsmith
Flagsmith integration via Membrane CLI. Manage feature flags, segments, and remote configuration.
This is a documentation-only skill that wraps the Membrane CLI for Flagsmith interaction; all declared capabilities (network, shell) are explicitly documented and match the code paths.
可以安装
No action needed. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md: npm install -g, membrane CLI commands |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: proxy requests to Flagsmith API, Membrane OAuth flow |
| 文件系统 | NONE | NONE | — | No file writes or reads declared or observed |
| 环境变量 | NONE | NONE | — | No environment variable access declared or observed |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://docs.flagsmith.com/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 126 行 Markdown 1f · 126L
└─
SKILL.md
Markdown
安全亮点
✓ No scripts or binary files present; skill is purely documentation
✓ Credentials are managed server-side by Membrane (no local secret storage)
✓ No shell obfuscation, base64, or suspicious patterns detected
✓ No credential harvesting or data exfiltration behavior
✓ All shell commands (npm install, membrane CLI) are explicitly documented
✓ Skill explicitly recommends using pre-built actions over raw API calls