扫描报告
0 /100
pipeline-crm
PipelineCRM integration. Manage data, records, and automate workflows. Use when the user wants to interact with PipelineCRM data.
PipelineCRM integration skill using the Membrane CLI proxy for API access; no executable code, only documentation with legitimate tool usage patterns.
可以安装
This skill is safe to use. Consider pinning the CLI version in install instructions for reproducibility.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | SKILL.md only contains documentation; no filesystem operations performed |
| 网络访问 | READ | READ | ✓ 一致 | Membrane CLI proxies API requests to PipelineCRM; declared in SKILL.md line 6 |
| 命令执行 | WRITE | WRITE | ✓ 一致 | CLI commands (npm install, membrane login/connect/action run/request) are docume… |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.pipelinecrm.com/ SKILL.md:19 目录结构
1 文件 · 6.7 KB · 258 行 Markdown 1f · 258L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code or scripts — purely documentation
✓ Delegates credential management to Membrane platform (no local secrets)
✓ No sensitive file or path access detected
✓ No obfuscation, base64-encoded payloads, or eval patterns
✓ No data exfiltration or C2 communication patterns
✓ No credential harvesting — explicitly advises against asking for API keys
✓ Membrane acts as a secure proxy intermediary for all API calls
✓ Uses pre-built actions with built-in auth over raw API calls (encouraged in docs)