扫描报告
5 /100
samcart
SamCart integration for managing Products, Orders, Customers, Funnels, and Upsells
This is a legitimate SamCart integration skill using the Membrane CLI for e-commerce operations. All capabilities are documented and the credential handling is delegated to a third-party service (Membrane) server-side.
可以安装
No action required. This skill follows best practices by delegating authentication to a trusted middleware service.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | READ | READ | ✓ 一致 | SKILL.md:34-35 npm install and membrane CLI commands are documented |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:19 Official docs reference, membrane proxy requests documented |
| 文件系统 | NONE | NONE | — | No file operations declared or observed |
| 环境变量 | NONE | NONE | — | SKILL.md:72 explicitly states 'never ask for API keys' |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.samcart.com/ SKILL.md:19 目录结构
1 文件 · 4.8 KB · 152 行 Markdown 1f · 152L
└─
SKILL.md
Markdown
安全亮点
✓ Credential handling is delegated server-side to Membrane - no local secrets stored
✓ All shell commands (npm install, membrane CLI) are explicitly documented
✓ Skill explicitly instructs to never ask users for API keys or tokens
✓ Uses pre-built actions to avoid raw API calls when possible
✓ Standard OAuth flow for authentication (browser-based)
✓ No sensitive file access, no obfuscation, no hidden functionality
✓ No base64 encoding or suspicious execution patterns