扫描报告
5 /100
lean-technologies
Lean Technologies integration for financial APIs (payments, reconciliation, workflows)
A legitimate Lean Technologies API integration skill that uses the documented Membrane CLI for all operations; all shell and network access is declared in documentation.
可以安装
No action required. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:26 npm install -g @membranehq/cli |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:7,39 membrane request / proxy API calls |
| 文件系统 | NONE | NONE | — | No file operations declared or observed |
| 环境变量 | NONE | NONE | — | SKILL.md explicitly states 'never ask for API keys' |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.lean.tech/ SKILL.md:19 目录结构
1 文件 · 4.5 KB · 126 行 Markdown 1f · 126L
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands are explicitly declared in documentation
✓ Credential handling delegated to Membrane CLI (no local secret storage)
✓ No hidden scripts, binaries, or undisclosed functionality
✓ Single-file skill with transparent, documented behavior
✓ Uses pre-built Membrane actions as recommended approach
✓ No base64, eval, or obfuscated code patterns detected
✓ No sensitive path access (.ssh, .aws, .env) observed