扫描报告
0 /100
sap-c4c
SAP C4C integration for managing data, records, and workflow automation
This is a legitimate SAP C4C integration skill using the Membrane CLI. All capabilities (network access for API calls) are declared, documented, and necessary for the stated purpose. No malicious patterns detected.
可以安装
This skill is safe to use. No additional security controls required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: npm install @membranehq/cli, membrane request for SAP C4C API |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://help.sap.com/viewer/product/SAP_CLOUD_FOR_CUSTOMER/CLOUD SKILL.md:19 目录结构
1 文件 · 5.7 KB · 199 行 Markdown 1f · 199L
└─
SKILL.md
Markdown
安全亮点
✓ All network access is declared and documented for SAP C4C API integration
✓ Credential management is handled server-side by Membrane, no local secret storage
✓ Documentation clearly states 'never ask the user for API keys or tokens'
✓ No base64 encoding, eval(), or obfuscation patterns
✓ No sensitive file path access (~/.ssh, ~/.aws, .env)
✓ No curl|bash or wget|sh remote script execution patterns
✓ No environment variable iteration for credential harvesting
✓ Skill is MIT licensed with a legitimate GitHub repository