Scan Report
5 /100
dronahq
DronaHQ integration skill using Membrane CLI
Documentation-only skill that describes legitimate Membrane CLI usage for DronaHQ integration with no hidden functionality or credential harvesting.
Safe to install
This skill is safe to use. All capabilities are documented and necessary for the stated integration purpose.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md: npm install -g @membranehq/cli; membrane action run/list/connect comma… |
| Network | READ | READ | ✓ Aligned | SKILL.md: npm install + Membrane proxy requests to DronaHQ API |
| Filesystem | NONE | NONE | — | No file operations described |
2 findings
Medium External URL 外部 URL
https://getmembrane.com SKILL.md:7 Medium External URL 外部 URL
https://docs.dronahq.com/ SKILL.md:19 File Tree
1 files · 4.3 KB · 124 lines Markdown 1f · 124L
└─
SKILL.md
Markdown
Security Positives
✓ No executable code - documentation only
✓ Credentials managed through Membrane connection flow, not manual API keys
✓ All shell commands and network access are explicitly documented
✓ No hidden functionality or obfuscated code
✓ Best practices guidance included for secure integration
✓ Uses official CLI tool (@membranehq/cli) from known vendor