Scan Report
5 /100
budget-insight
Budget Insight integration for personal finance management
This is a legitimate Budget Insight integration skill that uses the Membrane CLI for all operations with no malicious indicators.
Safe to install
No action needed. The skill is safe to use.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in skill |
| Network | READ | READ | ✓ Aligned | Uses Membrane CLI for API proxy calls |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://developers.budget-insight.com/ SKILL.md:19 File Tree
1 files · 4.4 KB · 125 lines Markdown 1f · 125L
└─
SKILL.md
Markdown
Security Positives
✓ All authentication handled by Membrane with no local credential storage
✓ No sensitive file access (ssh, aws, .env paths)
✓ No obfuscation or base64-encoded execution
✓ No credential harvesting or exfiltration
✓ No remote script execution patterns (curl|bash, wget|sh)
✓ Clear documentation matches implementation approach
✓ Delegates to a well-established proxy service for external API calls