扫描报告
5 /100
kern-ai
Kern AI integration for ML data labeling and model training
This is a documentation-only skill for Kern AI integration using the Membrane CLI. No scripts, no code, no dependencies, and no suspicious behavior detected.
可以安装
Approve for use. This skill is safe and performs exactly as documented.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in skill |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:7 - External URLs to membrane.com and kern.ai are declared |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:25-27 - npm install and membrane CLI commands declared |
| 环境变量 | NONE | NONE | — | No environment variable access detected |
| 技能调用 | NONE | NONE | — | No skill chaining |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | Browser used only for OAuth flow - declared |
| 数据库 | NONE | NONE | — | No database access |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://docs.kern.ai/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 127 行 Markdown 1f · 127L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code
✓ All shell operations are explicitly declared in SKILL.md
✓ Credential handling is delegated to Membrane (no local secret storage)
✓ Uses standard npm install - no pip, no curl|bash
✓ No sensitive file paths accessed (~/.ssh, ~/.aws, .env)
✓ No obfuscation (base64, eval, atob)
✓ No data exfiltration or C2 communication
✓ No hidden functionality - doc-to-code match is perfect
✓ Legitimate open-source platform integration (Kern AI)