扫描报告
5 /100
mati
Mati identity verification platform integration via Membrane CLI
A single-file Mati identity verification integration skill using the official Membrane CLI. All capabilities (network access, shell execution for npm install and membrane CLI) are declared in SKILL.md. No scripts, no dependencies beyond npm, no credential harvesting, no obfuscation, and no sensitive file access.
可以安装
No action needed. The skill is a legitimate connector wrapper with transparent, documented behavior.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | SKILL.md: No file read/write operations described |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: Communicates with Membrane and Mati APIs |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md: npm install -g @membranehq/cli; membrane login/connect/run commands |
| 环境变量 | NONE | NONE | — | SKILL.md: No environment variable access described |
| 技能调用 | NONE | NONE | — | SKILL.md: No cross-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | SKILL.md: Browser used only for OAuth flow via Membrane, not controlled by the s… |
| 数据库 | NONE | NONE | — | SKILL.md: No direct database access |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://docs.mati.global/reference/ SKILL.md:19 目录结构
1 文件 · 4.3 KB · 123 行 Markdown 1f · 123L
└─
SKILL.md
Markdown
安全亮点
✓ Single-file skill with no hidden scripts or binaries
✓ All shell commands (npm install, membrane CLI) are explicitly documented in SKILL.md
✓ No credential harvesting — Membrane handles auth server-side with no local secrets
✓ No sensitive file path access (~/.ssh, ~/.aws, .env, etc.)
✓ No obfuscation, base64 encoding, or anti-analysis patterns
✓ No external IP addresses or suspicious URLs beyond legitimate Membrane/Mati domains
✓ Proxy request feature is documented and uses Membrane's authenticated gateway
✓ Uses official npm package (@membranehq/cli) from public registry