Shopee
Security checks across malware telemetry and agentic risk
Overview
This Shopee integration is coherent and not malicious, but it deserves Review because it can use authenticated Shopee access for broad raw API requests, including write and delete operations, without clear approval guardrails.
Install only if you trust Membrane with delegated access to your Shopee account. Use a least-privileged connection where possible, prefer listed Membrane actions over raw proxy requests, and require explicit user approval before any create, update, delete, or raw API operation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.