Scan Report
5 /100
aspireiq
AspireIQ integration for influencer marketing platform management
This is a documentation-only skill with no executable code, describing how to use the Membrane CLI for AspireIQ API access. All behaviors are clearly declared in SKILL.md with no hidden functionality.
Safe to install
This skill is safe to use. It contains only documentation and uses the documented Membrane CLI for all operations. No action required.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in this skill |
| Network | READ | READ | ✓ Aligned | Membrane proxy for API access is documented |
| Shell | WRITE | WRITE | ✓ Aligned | CLI commands (npm install, membrane) documented in SKILL.md |
| Environment | NONE | NONE | — | No environment variable access declared or observed |
| Skill Invoke | NONE | NONE | — | No skill invocation observed |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | Browser used only for OAuth flow (documented) |
| Database | NONE | NONE | — | No database access |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://developers.aspireiq.com/ SKILL.md:19 File Tree
1 files · 7.5 KB · 266 lines Markdown 1f · 266L
└─
SKILL.md
Markdown
Security Positives
✓ No executable code present - skill is documentation only
✓ All behaviors (CLI usage, network access) are clearly documented
✓ No credential exfiltration - Membrane handles auth securely
✓ No obfuscation, base64 encoding, or suspicious patterns
✓ No sensitive file access (SSH, AWS, .env)
✓ No external IP connections or data exfiltration
✓ Open source repository reference provided
✓ MIT license with clear attribution