扫描报告
5 /100
buildchatbot
BuildChatbot integration. Manage data, records, and automate workflows. Use when the user wants to interact with BuildChatbot data.
Documentation-only skill describing Membrane CLI usage for BuildChatbot integration. No executable code, scripts, or suspicious behavior detected.
可以安装
No action needed. This is a legitimate documentation skill with no security concerns.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | N/A - no file operations in skill |
| 网络访问 | NONE | NONE | — | N/A - skill only documents CLI usage, no direct network calls |
| 命令执行 | NONE | NONE | — | N/A - skill contains no shell commands |
| 环境变量 | NONE | NONE | — | N/A - no environment variable access |
| 技能调用 | NONE | NONE | — | N/A - no skill invocation |
| 剪贴板 | NONE | NONE | — | N/A - no clipboard access |
| 浏览器 | NONE | NONE | — | N/A - no browser automation |
| 数据库 | NONE | NONE | — | N/A - no database access |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.ibm.com/docs/en/watson-assistant/v1?topic=applications-building-chatbot SKILL.md:19 目录结构
1 文件 · 4.4 KB · 127 行 Markdown 1f · 127L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code
✓ No sensitive file access patterns (no ~/.ssh, ~/.aws, .env references)
✓ No base64, eval, or obfuscated code patterns
✓ No credential harvesting or exfiltration behavior
✓ Uses legitimate Membrane CLI for authentication (documented OAuth flow)
✓ No hidden functionality - all capabilities are declared in SKILL.md
✓ Best practices documented: prefer built-in actions over raw API calls
✓ No subprocess or shell execution within the skill itself
✓ No IOCs indicating malicious behavior (C2, reverse shells, data theft)