扫描报告
5 /100
greythr
GreytHR integration. Manage data, records, and automate workflows using Membrane CLI.
This is a documentation-only skill (SKILL.md) that describes how to use the Membrane CLI for GreytHR integration. All declared capabilities (shell:WRITE for npm install, network:READ for API access) are necessary and properly documented.
可以安装
No action needed. The skill is safe to use as it only contains documentation.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:44 - npm install -g @membranehq/cli |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:68-90 - membrane request/proxy for API calls |
| 文件系统 | NONE | NONE | — | No file operations declared or observed |
| 环境变量 | NONE | NONE | — | No env access declared or observed |
| 技能调用 | NONE | NONE | — | No nested skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | Browser auth mentioned but handled by Membrane CLI externally |
| 数据库 | NONE | NONE | — | No database operations |
2 项发现
中危 外部 URL 外部 URL
https://getmembrane.com SKILL.md:7 中危 外部 URL 外部 URL
https://help.greytip.com/en/ SKILL.md:19 目录结构
1 文件 · 4.4 KB · 128 行 Markdown 1f · 128L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code
✓ All CLI usage (npm install, membrane) is explicitly declared in SKILL.md
✓ No credential harvesting or storage - uses Membrane's secure connection management
✓ No base64, eval, or shell injection patterns
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ No remote script execution (curl|bash, wget|sh)
✓ No hidden functionality - all behavior documented
✓ References legitimate third-party tool (Membrane CLI) from npm registry
✓ Authentication handled externally by Membrane (no API keys stored locally)