Scan Report
0 /100
Multi-API Data Pipeline to Google Sheets
Connects multiple REST APIs, fetches and transforms data, and pushes it to a live Google Sheets dashboard that auto-updates on a schedule.
纯文档型技能,仅含 SKILL.md,无代码/脚本,声明功能与文档内容一致,无恶意行为发现。
Safe to install
无需阻断,可直接使用。
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | SKILL.md:6-8 - Connects to up to 10 REST APIs, Handles authentication |
| Environment | READ | READ | ✓ Aligned | SKILL.md:16-22 - Declares reading GOOGLE_SERVICE_ACCOUNT_JSON, [SERVICE]_API_KEY |
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md:36 - logs/pipeline_YYYY-MM-DD.txt |
| Shell | NONE | NONE | — | No shell/code files present |
| Skill Invoke | NONE | NONE | — | No sub-skill invocations declared |
| Clipboard | NONE | NONE | — | No clipboard access declared |
| Browser | NONE | NONE | — | No browser access declared |
| Database | NONE | NONE | — | No database access declared |
File Tree
1 files · 2.5 KB · 58 lines Markdown 1f · 58L
└─
SKILL.md
Markdown
Security Positives
✓ 纯文档型技能,无代码实体,无执行风险
✓ 声明了所需的环境变量(API密钥、Sheet ID),边界清晰
✓ 包含安全规则:永不将凭证存入输出文件或日志
✓ 声明了日志文件路径,文件系统写入范围明确
✓ 无第三方依赖实际安装(仅文档声明),无供应链风险
✓ 无网络数据外泄声明,API调用仅用于向 Google Sheets 写入