扫描报告
0 /100
faceup
FaceUp integration for financial planning and forecasting
FaceUp integration skill using Membrane CLI with fully documented shell commands and credential management. No hidden functionality or malicious patterns detected.
可以安装
No action required. The skill is secure for use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md documents npm install -g @membranehq/cli and membrane CLI commands |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md documents FaceUp API interaction via Membrane proxy |
| 文件系统 | NONE | NONE | — | No filesystem operations in skill |
| 环境变量 | NONE | NONE | — | No environment variable access |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://api.faceup.com/ SKILL.md:19 目录结构
1 文件 · 4.3 KB · 124 行 Markdown 1f · 124L
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands explicitly documented in SKILL.md
✓ Credential management delegated to Membrane CLI (no local secret storage)
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ No base64/eval/exfiltration patterns
✓ No hidden instructions or undocumented behavior
✓ Follows best practices: discovers actions before custom API calls
✓ Encourages using pre-built actions over raw API requests