扫描报告
5 /100
brass
Brass integration for financial planning and spend management platform
This is a documentation-only skill with no implementation code. It describes how to use the legitimate Membrane CLI to interact with the Brass financial platform. No malicious behavior, scripts, or suspicious code was found.
可以安装
Approve for use. This skill contains only documentation and delegates all operations to the official Membrane CLI. No local code execution or credential handling occurs.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No filesystem access required or implemented |
| 网络访问 | READ | READ | ✓ 一致 | Uses Membrane CLI for API communication (documented) |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://www.brass.io/api-reference SKILL.md:19 目录结构
1 文件 · 4.4 KB · 126 行 Markdown 1f · 126L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code - reduces attack surface
✓ Delegates credential management to official Membrane platform
✓ Follows security best practices by never asking users for API keys
✓ Uses established npm package for CLI installation
✓ No sensitive file access, no credential harvesting, no data exfiltration
✓ References legitimate external services with proper attribution