中文 EN

Scan Report

Scan New Files

⚠ Low Risk — Risk Score 20/100
Last scan:1 day ago Rescan
20 /100
tray
Tray.io low-code automation platform integration via Membrane CLI
This is a legitimate Tray.io integration skill using the Membrane CLI. Shell execution is required for npm commands but undocumented; behavior otherwise matches stated purpose.
Skill Nametray
Duration28.8s
Enginepi
✓
Safe to install
Add 'shell:WRITE' to the allowed tools declaration in SKILL.md metadata to match the actual requirements. Pin the CLI version (e.g., @membranehq/[email protected]) for reproducible installs.

Findings 2 items

Severity Finding Location
Low
Missing allowed-tools declaration Doc Mismatch
SKILL.md metadata lacks allowedTools. The skill requires shell:WRITE (npm install, membrane CLI) and network:WRITE (API proxying), but neither is declared.
metadata section with empty allowedTools
→ Add allowedTools: [Bash] to the skill metadata. This is documentation hygiene rather than malicious隐瞒.
 SKILL.md:1
Low
Unpinned npm package version Supply Chain
CLI is installed with 'npm install -g @membranehq/cli' without a version pin. Future versions could introduce unexpected behavior.
npm install -g @membranehq/cli
→ Pin to a specific version: npm install -g @membranehq/cli@latest or @membranehq/[email protected]
 SKILL.md:47
ResourceDeclaredInferredStatusEvidence
Shell NONE WRITE ✗ Violation SKILL.md:47-48 npm install -g @membranehq/cli; SKILL.md:51 membrane login
Network NONE WRITE ✗ Violation SKILL.md:65 membrane request proxies API calls
Filesystem NONE NONE — No file operations detected
Environment NONE NONE — No environment variable access
Database NONE NONE — No database access
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — Browser used only via system opener for auth flow, not automation
Skill Invoke NONE NONE — No cross-skill invocation
2 findings
🔗
Medium External URL 外部 URL
https://getmembrane.com
SKILL.md:7
🔗
Medium External URL 外部 URL
https://developers.tray.io/
SKILL.md:19

File Tree

1 files · 4.3 KB · 124 lines
Markdown 1f · 124L
└─ 📝 SKILL.md Markdown 124L · 4.3 KB

Dependencies 1 items

PackageVersionSourceKnown VulnsNotes
@membranehq/cli unpinned npm No Version not pinned in SKILL.md install instructions

Security Positives

✓ Membrane CLI is from a known vendor (MembraneHQ) with an official GitHub repo
✓ No credential harvesting — Membrane manages auth server-side with no local secrets
✓ No data exfiltration — all API calls route through Membrane's documented proxy
✓ No obfuscation, base64, or suspicious encoding patterns
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ No reverse shell, C2, or outbound data transfer to untrusted endpoints
✓ Skill purpose (Tray.io automation) is clearly and accurately documented