Scan Report
5 /100
intellihr
IntelliHR integration for managing HR data, records, and workflow automation
This is a legitimate IntelliHR integration skill that uses the Membrane CLI for HR data management. All behavior is clearly documented with no hidden functionality.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | SKILL.md:56 - membrane request to IntelliHR API through Membrane proxy |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md:26 - npm install -g @membranehq/cli documented |
| Filesystem | NONE | NONE | — | No file operations performed |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://developer.intellihr.com/ SKILL.md:19 File Tree
1 files · 4.7 KB · 151 lines Markdown 1f · 151L
└─
SKILL.md
Markdown
Security Positives
✓ All shell commands are explicitly documented in SKILL.md
✓ Credential management is handled server-side by Membrane with no local secrets
✓ Uses standard OAuth/browser-based authentication flow
✓ No credential harvesting or exfiltration
✓ No obfuscation, base64 encoding, or suspicious patterns
✓ Legitimate business integration for known HR platform
✓ No hidden functionality or shadow operations
✓ Clear separation between pre-built actions and raw API proxy usage