扫描报告
0 /100
datananas
Datananas integration for managing sales engagement data, records, and workflow automation
Datananas integration skill is a legitimate sales engagement platform connector using Membrane CLI with all functionality properly documented in SKILL.md.
可以安装
This skill is safe to use. No security concerns identified. All shell commands, network access, and dependencies are explicitly declared.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | npm install -g @membranehq/cli; membrane login/connect/action commands |
| 网络访问 | READ | READ | ✓ 一致 | Membrane CLI makes API calls to Datananas platform |
| 环境变量 | NONE | NONE | — | No environment variable access; Membrane handles auth server-side |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.datananas.com/ SKILL.md:19 目录结构
1 文件 · 4.3 KB · 128 行 Markdown 1f · 128L
└─
SKILL.md
Markdown
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
@membranehq/cli | latest | npm | 否 | Using @latest tag - consider pinning to specific version for reproducibility |
安全亮点
✓ All shell commands are explicitly documented in SKILL.md
✓ Uses standard npm install for dependency management
✓ Authentication uses OAuth/browser flow, no local credential storage
✓ Membrane CLI is a documented legitimate tool (membranehq)
✓ No base64 encoding, obfuscation, or suspicious patterns detected
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ No data exfiltration or C2 communication patterns
✓ No hidden instructions or prompt injection attempts
✓ Clear separation: skill only orchestrates Membrane CLI, no direct API handling