扫描报告
5 /100
summit
Summit integration. Manage Organizations, Pipelines, Users, Goals, Filters.
Documentation-only skill with fully declared behavior; uses legitimate Membrane CLI for Summit integration with no hidden functionality.
可以安装
This skill is safe to use. No action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:21 - npx @membranehq/cli@latest login |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:21-58 - All npx commands use shell execution |
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:24 - Credentials stored in ~/.membrane/credentials.json |
1 项发现
中危 外部 URL 外部 URL
https://developer.summit.ai/ SKILL.md:17 目录结构
1 文件 · 4.4 KB · 116 行 Markdown 1f · 116L
└─
SKILL.md
Markdown
安全亮点
✓ No code/scripts present - pure documentation reduces attack surface
✓ All shell operations declared and documented with npx commands
✓ Credential handling properly delegated to Membrane CLI (no manual key collection)
✓ Best practices documented: prefer pre-built actions over raw API calls
✓ Explicitly warns against collecting user API keys/tokens
✓ No hidden functionality, base64 encoding, or obfuscated code