扫描报告
5 /100
budget-insight
Budget Insight integration for personal finance management
This is a legitimate Budget Insight integration skill that uses the Membrane CLI for all operations with no malicious indicators.
可以安装
No action needed. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in skill |
| 网络访问 | READ | READ | ✓ 一致 | Uses Membrane CLI for API proxy calls |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://developers.budget-insight.com/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 125 行 Markdown 1f · 125L
└─
SKILL.md
Markdown
安全亮点
✓ All authentication handled by Membrane with no local credential storage
✓ No sensitive file access (ssh, aws, .env paths)
✓ No obfuscation or base64-encoded execution
✓ No credential harvesting or exfiltration
✓ No remote script execution patterns (curl|bash, wget|sh)
✓ Clear documentation matches implementation approach
✓ Delegates to a well-established proxy service for external API calls