扫描报告
10 /100
zoho-analytics
Zoho Analytics integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Analytics data.
This skill is a pure-documentation SKILL.md for Zoho Analytics integration using the legitimate Membrane CLI — no implementation code, no scripts, and no suspicious behavior.
可以安装
Approve for use. No security concerns identified. Ensure the Membrane CLI version is pinned in any downstream automation to prevent supply-chain drift.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:9 — requires network access for Zoho API and Membrane API communication |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:27-87 — runs npm install, membrane login, membrane connect, membrane ac… |
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:27 — npm install writes to node_modules (implicit write), CLI output re… |
| 技能调用 | NONE | NONE | — | No cross-skill invocations declared or inferred |
| 剪贴板 | NONE | NONE | — | No clipboard access found |
| 浏览器 | NONE | NONE | — | Browser used only via Membrane's OAuth flow (external, not this skill) |
| 数据库 | NONE | NONE | — | No database access found |
| 环境变量 | NONE | NONE | — | No direct environment variable access; Membrane handles credentials server-side |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.zoho.com/analytics/help/api/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 129 行 Markdown 1f · 129L
└─
SKILL.md
Markdown
安全亮点
✓ No implementation code — only documentation in SKILL.md eliminates execution risk
✓ Credential management is explicitly handled server-side by Membrane with no local secret storage
✓ All shell commands are explicitly declared and tied to the legitimate @membranehq/cli npm package
✓ Network access is scoped to Zoho Analytics API and Membrane infrastructure — no arbitrary IP access
✓ No base64, eval, obfuscation, or anti-analysis patterns present
✓ SKILL.md clearly documents the purpose, authentication flow, and API proxy mechanism
✓ External URLs (getmembrane.com, zoho.com) are well-known legitimate services