扫描报告
5 /100
flipando
Flipando integration for managing Deals, Persons, Organizations, Leads, Projects, Activities via Membrane CLI
This skill is purely documentation-based with no executable code; all behavior (shell for npm install, network for CLI calls) is clearly declared and represents standard CLI tool usage.
可以安装
No action needed. This skill is safe to use as it contains only documentation with no hidden functionality.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md: 'npm install -g @membranehq/cli' and 'membrane' CLI commands |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: 'Requires network access' in compatibility section |
| 文件系统 | NONE | NONE | — | No file operations described |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.mercadolibre.com.ar/en_us/flipando SKILL.md:19 目录结构
1 文件 · 4.7 KB · 127 行 Markdown 1f · 127L
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation skill with no executable code
✓ All shell commands (npm install, membrane CLI) explicitly documented
✓ Network access declared in compatibility requirements
✓ Credentials handled server-side by Membrane CLI, no local secret storage
✓ No hidden functionality or obfuscation detected
✓ No suspicious patterns (base64, curl|bash, eval) present
✓ No credential harvesting or data exfiltration
✓ Standard CLI tool usage pattern