扫描报告
5 /100
filestack
FileStack integration skill for managing data, records, and workflow automation
Single-file documentation skill for FileStack integration using Membrane CLI; no executable code, well-scoped declared permissions, and no malicious indicators.
可以安装
No action required. This skill is safe to use as documented.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | N/A - no file operations in skill |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:7,19 - FileStack API and docs URLs |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:22-23 - npm install -g @membranehq/cli |
| 环境变量 | NONE | NONE | — | N/A - no env var access |
| 技能调用 | NONE | NONE | — | N/A |
| 剪贴板 | NONE | NONE | — | N/A |
| 浏览器 | NONE | NONE | — | N/A |
| 数据库 | NONE | NONE | — | N/A |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.filestack.com/docs/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 125 行 Markdown 1f · 125L
└─
SKILL.md
Markdown
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
@membranehq/cli | latest | npm | 否 | External npm package, not pinned in skill |
安全亮点
✓ Only contains documentation (SKILL.md); no executable code present
✓ All shell commands are explicitly documented with clear purposes
✓ Credential handling delegated to Membrane CLI (server-side auth, no local secrets)
✓ No sensitive file or path access detected
✓ No obfuscation, base64, or suspicious patterns
✓ External dependencies are reputable (npm @membranehq/cli, Membrane SaaS)
✓ Best practices documented: prefer built-in actions over raw API calls