中文 EN

Scan Report

Scan New Files

⚠ Low Risk — Risk Score 15/100
Last scan:1 day ago Rescan
15 /100
scout-apm
Scout APM integration — query traces, endpoints, errors, N+1 queries, and deployments via Membrane CLI
Scout APM integration skill using the Membrane CLI with appropriate declared permissions and no malicious behavior detected.
Skill Namescout-apm
Duration32.8s
Enginepi
✓
Safe to install
Approve for use. Consider pinning the npm CLI version for supply chain hygiene.

Findings 2 items

Severity Finding Location
Low
Unpinned npm global package Supply Chain
The skill installs @membranehq/cli without a pinned version, using 'npm install -g @membranehq/cli'. This allows the package maintainer to publish a new version that could change behavior or be compromised.
npm install -g @membranehq/cli
→ Pin to a specific version: npm install -g @membranehq/[email protected]
 SKILL.md:31
Low
Implied but not declared network:READ scope Doc Mismatch
The skill proxies requests to Scout APM API via membrane but does not explicitly declare network:READ in its allowed-tools mapping, though it is implicitly required.
No allowed-tools or capabilities declaration present in frontmatter
→ Add an allowed-tools mapping to SKILL.md frontmatter that explicitly declares network:READ for the membrane request proxy functionality
 SKILL.md:1
ResourceDeclaredInferredStatusEvidence
Network READ READ ✓ Aligned SKILL.md:47-64 — membrane request/connect operations for Scout APM API
Shell WRITE WRITE ✓ Aligned SKILL.md:31 — npm install -g @membranehq/cli; SKILL.md:35 — membrane login/conne…
Filesystem NONE NONE — No filesystem operations found
Environment NONE NONE — No environment variable access detected
Skill Invoke NONE NONE — No nested skill invocations
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — No browser automation
Database NONE NONE — No database access
2 findings
🔗
Medium External URL 外部 URL
https://getmembrane.com
SKILL.md:7
🔗
Medium External URL 外部 URL
https://docs.scoutapm.com/
SKILL.md:19

File Tree

1 files · 4.4 KB · 127 lines
Markdown 1f · 127L
└─ 📝 SKILL.md Markdown 127L · 4.4 KB

Dependencies 1 items

PackageVersionSourceKnown VulnsNotes
@membranehq/cli * npm No No version pinned; installed globally via npm install -g

Security Positives

✓ No credential theft — skill explicitly delegates auth to Membrane CLI and states never to ask for API keys
✓ No sensitive path access — no reads of ~/.ssh, ~/.aws, .env, or similar
✓ No obfuscation — all code is plain text, no base64 or eval
✓ No data exfiltration — all network calls are to documented external services (getmembrane.com, Scout APM API)
✓ No reverse shell or C2 infrastructure
✓ No hidden HTML comments or embedded payloads
✓ Clear documentation matching actual behavior — no doc-to-code mismatch
✓ Credential lifecycle handled server-side by Membrane, not stored locally