扫描报告
5 /100
seam
Seam integration for managing smart building devices (locks, thermostats) via Membrane CLI
This is a legitimate Seam IoT platform integration skill using the Membrane CLI; all functionality is documented, shell access is limited to npm install and CLI commands, and no hidden or malicious behavior was detected.
可以安装
No action required. The skill operates as documented with appropriate declared permissions for CLI tool installation and API interaction.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md declares network access for API communication |
| 命令执行 | WRITE | WRITE | ✓ 一致 | npm install, membrane CLI commands documented in SKILL.md |
| 文件系统 | NONE | WRITE | ✓ 一致 | npm global install writes to node_modules (necessary for CLI) |
| 环境变量 | NONE | NONE | — | Membrane handles auth server-side, no local env access needed |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.seam.so/docs SKILL.md:19 目录结构
1 文件 · 4.4 KB · 133 行 Markdown 1f · 133L
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands are documented in SKILL.md with clear purposes
✓ Membrane handles authentication server-side - no local credential storage
✓ No base64, obfuscation, or anti-analysis techniques detected
✓ No credential harvesting or data exfiltration observed
✓ Standard npm CLI installation pattern
✓ Documentation is clear about proxy request functionality and intent