扫描报告
5 /100
vtex
VTEX integration for managing data, records, and workflow automation
Clean VTEX integration skill that uses the Membrane CLI with fully documented, legitimate behavior and no hidden functionality.
可以安装
No action required. The skill is safe to use as documented.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:40-52 - membrane request command for API calls |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:27 - npm install -g @membranehq/cli |
| 文件系统 | NONE | NONE | — | No file operations beyond CLI installation |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.vtex.com/ SKILL.md:19 目录结构
1 文件 · 4.3 KB · 125 行 Markdown 1f · 125L
└─
SKILL.md
Markdown
安全亮点
✓ No hidden functionality - all operations are documented in SKILL.md
✓ No credential storage or harvesting - Membrane handles auth server-side
✓ No base64, eval, or obfuscated code patterns
✓ No curl|bash or wget|sh remote script execution
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ Uses version-pinned CLI installation via npm
✓ Standard npm install for CLI tool - legitimate behavior
✓ No external data exfiltration detected
✓ Clear documentation of all capabilities and behaviors