扫描报告
5 /100
paragon
Paragon integration for managing data, records, and workflow automation
Documentation-only skill with all capabilities explicitly declared. No executable code, no suspicious behavior, and no indicators of malicious intent.
可以安装
No action required. This is a legitimate Paragon integration skill that uses the documented Membrane CLI for CDP operations.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:31 - npm install -g @membranehq/cli |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:60-84 - membrane request/proxy for API calls |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://help.useparagon.com/ SKILL.md:19 目录结构
1 文件 · 9.1 KB · 323 行 Markdown 1f · 323L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code to analyze
✓ All shell and network capabilities are explicitly declared in SKILL.md
✓ Credentials are handled server-side by Membrane, not stored locally
✓ Skill explicitly instructs to never ask users for API keys
✓ Best practices section encourages using pre-built actions over raw API calls
✓ Clear OAuth-based authentication flow with browser interaction