Scan Report
5 /100
securitytrails
SecurityTrails integration for threat intelligence data via Membrane CLI
Pure documentation skill with no executable code - uses legitimate Membrane CLI for SecurityTrails API integration.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | READ | ✓ Aligned | Documentation only, no file operations |
| Network | READ | READ | ✓ Aligned | Intended for SecurityTrails API access via Membrane proxy |
| Shell | WRITE | WRITE | ✓ Aligned | CLI commands (npm install, membrane login/run) are documented and necessary |
| Environment | NONE | NONE | — | No environment variable access |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://docs.securitytrails.com/ SKILL.md:19 File Tree
1 files · 4.5 KB · 128 lines Markdown 1f · 128L
└─
SKILL.md
Markdown
Security Positives
✓ No executable code - pure documentation
✓ All functionality is clearly declared in SKILL.md
✓ Uses established Membrane platform for credential management (no local API key storage)
✓ No suspicious patterns: no base64, no IP addresses, no obfuscation
✓ No sensitive file access, no credential harvesting
✓ Legitimate external URLs point to official documentation