扫描报告
5 /100
werkbonapp
WerkbonApp integration for field service management via Membrane CLI
This is a documentation-only skill that provides instructions for using the Membrane CLI to integrate with WerkbonApp. No malicious behavior, hidden functionality, or undeclared capabilities detected.
可以安装
This skill is safe to use. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file system operations in the skill |
| 网络访问 | READ | READ | ✓ 一致 | All network calls go through documented Membrane CLI |
| 命令执行 | NONE | NONE | — | Only documented CLI installation via npm |
| 环境变量 | NONE | NONE | — | No environment variable access |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.werkbonapp.nl/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 125 行 Markdown 1f · 125L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code
✓ All operations declared in SKILL.md
✓ Uses a known legitimate third-party service (Membrane CLI)
✓ No credential harvesting - explicitly states 'Let Membrane handle credentials'
✓ No hidden functionality or suspicious patterns
✓ No base64, eval, or obfuscated code
✓ No direct IP network requests - all traffic routed through Membrane CLI
✓ No sensitive path access (.ssh, .aws, .env)