扫描报告
5 /100
bot9
Bot9 integration for managing chatbot data, records, and workflow automation
This is a documentation-only skill providing integration instructions for the Bot9 chatbot platform via the Membrane CLI. No malicious behavior detected.
可以安装
This skill is safe to use. Users should verify the Membrane CLI package authenticity before installation.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | Documentation-only, no file operations |
| 网络访问 | READ | READ | ✓ 一致 | Uses Membrane CLI to interact with external API - documented and necessary |
| 命令执行 | WRITE | WRITE | ✓ 一致 | npm install -g and membrane CLI commands - declared in docs |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://bot9.com/docs SKILL.md:19 目录结构
1 文件 · 4.5 KB · 127 行 Markdown 1f · 127L
└─
SKILL.md
Markdown
安全亮点
✓ No executable scripts or code files present - pure documentation
✓ No credential harvesting - delegates authentication to Membrane CLI
✓ No base64 encoding, eval(), or obfuscation
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ No hidden functionality or doc-to-code mismatch
✓ Clear, well-structured documentation explaining all operations
✓ Follows security best practice: Let Membrane handle credentials
✓ No suspicious network patterns or data exfiltration
✓ MIT license, public repository references