扫描报告
5 /100
1kosmos-blockid
1Kosmos BlockID integration for passwordless authentication and identity platform management
Pure documentation skill for 1Kosmos BlockID integration using Membrane CLI. All shell commands are explicitly documented, no hidden functionality or sensitive operations detected.
可以安装
This skill is safe to use. All capabilities are documented and aligned with the stated purpose of integrating with 1Kosmos BlockID via the Membrane CLI.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md uses npm install -g @membranehq/cli and membrane CLI commands |
| 网络访问 | READ | READ | ✓ 一致 | Skill communicates with Membrane and 1Kosmos APIs via documented CLI |
| 文件系统 | NONE | NONE | — | No filesystem access detected |
| 环境变量 | NONE | NONE | — | No environment variable access detected |
| 剪贴板 | NONE | NONE | — | No clipboard access detected |
| 浏览器 | NONE | NONE | — | Browser authentication mentioned as user-initiated OAuth flow |
| 数据库 | NONE | NONE | — | No database access detected |
| 技能调用 | NONE | NONE | — | No skill-to-skill invocation detected |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developer.1kosmos.com/ SKILL.md:19 目录结构
1 文件 · 4.5 KB · 133 行 Markdown 1f · 133L
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands explicitly declared in SKILL.md documentation
✓ No hidden functionality or shadow operations detected
✓ Credentials managed server-side by Membrane (no local secret storage)
✓ No credential harvesting or sensitive data access
✓ Legitimate third-party integration (Membrane CLI, 1Kosmos API)
✓ Open source repository referenced (github.com/membranedev/application-skills)
✓ MIT license declared
✓ No obfuscation, base64-encoded commands, or anti-analysis patterns
✓ Best practices documented (prefer pre-built actions over raw API calls)