扫描报告
0 /100
zoho-subscriptions
Zoho Subscriptions integration for managing subscriptions, customers, invoices, and recurring billing via Membrane CLI
Clean documentation-only skill for Zoho Subscriptions integration using the Membrane CLI. No suspicious patterns, hidden functionality, or security concerns detected.
可以安装
This skill is safe to use. It properly delegates credential management to the Membrane service and only uses declared shell commands for CLI operations.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in SKILL.md |
| 网络访问 | READ | READ | ✓ 一致 | Membrane CLI makes API calls to Zoho Subscriptions API |
| 命令执行 | WRITE | WRITE | ✓ 一致 | npm install -g @membranehq/cli, membrane login/connect/run commands |
| 环境变量 | NONE | NONE | — | No env access documented |
| 凭证 | NONE | NONE | — | Credentials handled server-side by Membrane |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.zoho.com/subscriptions/api/v1/ SKILL.md:19 目录结构
1 文件 · 4.5 KB · 129 行 Markdown 1f · 129L
└─
SKILL.md
Markdown
安全亮点
✓ No code files - only documentation present
✓ All shell commands explicitly documented in SKILL.md
✓ Credential management delegated to Membrane service (no local secrets)
✓ Uses standard npm package installation
✓ No obfuscation or encoded payloads detected
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ No data exfiltration indicators
✓ Legitimate business integration (Zoho Subscriptions API)
✓ No suspicious IOCs beyond standard documentation URLs