by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceThe skill's instructions, install step, and required permissions are consistent with a Membrane-backed Foxy integration; nothing requested is disproportionate to the stated purpose.
评估建议
This skill is instruction-only and uses the Membrane CLI to talk to Foxy. Before installing: (1) verify the npm package @membranehq/cli is the expected official package (review its npm/github page and publisher), (2) be prepared to authenticate interactively to your Membrane account (the CLI will open a browser or print a URL/code), and (3) understand that data passed to actions will go through Membrane's service. If you need least-privilege, run the CLI in a controlled environment (container or...详细分析 ▾
ℹ 用途与能力
The SKILL.md describes a Foxy (e-commerce) integration and lists actions like stores, coupons, subscriptions and customer operations which align with a Foxy integration. The top-level description also mentions 'Organizations, Users, Goals, Filters' (CRM-like terms) which is slightly different wording than the action list in the body — this is likely a minor documentation inconsistency but does not indicate extra or unexplained capabilities.
✓ 指令范围
All runtime instructions are narrowly scoped to installing the Membrane CLI, authenticating with Membrane, creating a connection to the Foxy connector, discovering actions, and running them. The instructions do not ask the agent to read arbitrary files, export unrelated environment variables, or send data to endpoints other than Membrane.
✓ 安装机制
The only install instruction is 'npm install -g @membranehq/cli@latest' (a public npm package). This is a typical, traceable install mechanism for a CLI. No downloads from unknown URLs or archive extraction are instructed.
✓ 凭证需求
The skill declares no required environment variables or credentials; it relies on interactive Membrane authentication. That matches the instructions which instruct users to log in via the CLI rather than providing API keys or secrets up-front.
✓ 持久化与权限
The skill is not always-included and is user-invocable. It does not request system config paths or permanent presence. note: model invocation is enabled (default), which allows autonomous invocation — this is normal platform behavior, not a specific red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/22
Auto sync from membranedev/application-skills
● Pending
安装命令
点击复制官方npx clawhub@latest install foxy-integration
镜像加速npx clawhub@latest install foxy-integration --registry https://cn.longxiaskill.com镜像同步中