扫描报告
0 /100
google-cloud-ai-platform
Google Cloud AI Platform integration via Membrane CLI
Documentation-only skill with transparent behavior - all shell and network operations are clearly declared and necessary for advertised functionality.
可以安装
Skill is safe to use. All operations are documented and follow security best practices by delegating credential management to the Membrane service.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md - API calls to Google Cloud AI Platform |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:37 - npm install -g @membranehq/cli |
| 文件系统 | NONE | NONE | — | No direct filesystem access; CLI tools handle file operations |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://cloud.google.com/ai-platform/docs SKILL.md:19 目录结构
1 文件 · 4.5 KB · 122 行 Markdown 1f · 122L
└─
SKILL.md
Markdown
安全亮点
✓ MIT license with public GitHub repository for accountability
✓ Credential handling delegated to Membrane service - no local secret storage
✓ All shell commands documented with clear purpose (npm install, membrane CLI)
✓ Best practices section explicitly warns against credential harvesting
✓ No base64, eval(), or obfuscated code patterns detected
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env) declared or observed
✓ Skill focuses on documented API integration without hidden functionality