Scan Report
5 /100
seam
Seam integration for managing smart building devices (locks, thermostats) via Membrane CLI
This is a legitimate Seam IoT platform integration skill using the Membrane CLI; all functionality is documented, shell access is limited to npm install and CLI commands, and no hidden or malicious behavior was detected.
Safe to install
No action required. The skill operates as documented with appropriate declared permissions for CLI tool installation and API interaction.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | SKILL.md declares network access for API communication |
| Shell | WRITE | WRITE | ✓ Aligned | npm install, membrane CLI commands documented in SKILL.md |
| Filesystem | NONE | WRITE | ✓ Aligned | npm global install writes to node_modules (necessary for CLI) |
| Environment | NONE | NONE | — | Membrane handles auth server-side, no local env access needed |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://www.seam.so/docs SKILL.md:19 File Tree
1 files · 4.4 KB · 133 lines Markdown 1f · 133L
└─
SKILL.md
Markdown
Security Positives
✓ All shell commands are documented in SKILL.md with clear purposes
✓ Membrane handles authentication server-side - no local credential storage
✓ No base64, obfuscation, or anti-analysis techniques detected
✓ No credential harvesting or data exfiltration observed
✓ Standard npm CLI installation pattern
✓ Documentation is clear about proxy request functionality and intent