Scan Report
5 /100
bot9
Bot9 integration for managing chatbot data, records, and workflow automation
This is a documentation-only skill providing integration instructions for the Bot9 chatbot platform via the Membrane CLI. No malicious behavior detected.
Safe to install
This skill is safe to use. Users should verify the Membrane CLI package authenticity before installation.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | Documentation-only, no file operations |
| Network | READ | READ | ✓ Aligned | Uses Membrane CLI to interact with external API - documented and necessary |
| Shell | WRITE | WRITE | ✓ Aligned | npm install -g and membrane CLI commands - declared in docs |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://bot9.com/docs SKILL.md:19 File Tree
1 files · 4.5 KB · 127 lines Markdown 1f · 127L
└─
SKILL.md
Markdown
Security Positives
✓ No executable scripts or code files present - pure documentation
✓ No credential harvesting - delegates authentication to Membrane CLI
✓ No base64 encoding, eval(), or obfuscation
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ No hidden functionality or doc-to-code mismatch
✓ Clear, well-structured documentation explaining all operations
✓ Follows security best practice: Let Membrane handle credentials
✓ No suspicious network patterns or data exfiltration
✓ MIT license, public repository references