📦 Honeycombio — 实用工具
v1.0.1集成. 管理 数据, records, 和 自动化 workflows. Use when 用户 wants interact 使用 Honeycomb.io 数据.
0· 112·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThis instruction-only skill is internally consistent: it tells the agent to use the Membrane CLI to connect to Honeycomb.io and does not request unrelated credentials or system access—main user risk is trusting the third-party Membrane service and installing its CLI.
评估建议
This skill appears coherent and simply instructs use of the Membrane CLI to talk to Honeycomb. Before installing or using it: 1) verify and trust the @membranehq npm package and publisher (or review its source) because installing a global npm CLI runs third-party code; 2) understand that Membrane will broker Honeycomb credentials and data—review Membrane's privacy/security policies and where data is sent/stored; 3) prefer running the CLI in an isolated environment if you have sensitive data; 4) ...详细分析 ▾
✓ 用途与能力
The skill name/description (Honeycomb.io integration) aligns with the instructions (use Membrane CLI to connect, list/create/run actions against a Honeycomb connector). No extraneous credentials, binaries, or config paths are requested.
ℹ 指令范围
Instructions are narrowly scoped to installing/using the Membrane CLI, authenticating, creating a connection, and running actions. They do not instruct the agent to read unrelated files or environment variables. However, the runtime flow delegates authentication and API access to Membrane, which means Honeycomb data and credentials will be brokered through a third-party service (getmembrane.com) — an operational/privacy consideration.
ℹ 安装机制
There is no formal install spec in the registry, but SKILL.md instructs users to install the Membrane CLI via npm (npm install -g @membranehq/cli) or use npx. Installing a global npm package executes code from the public registry, which is a common but non-trivial trust action; you should verify the package and its publisher before installing.
✓ 凭证需求
The skill requests no environment variables or secrets and explicitly advises against asking users for API keys. The only external requirement is a Membrane account and network access, which is proportionate to its stated purpose.
✓ 持久化与权限
The skill is instruction-only, does not request persistent/always-on privileges, and does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with any elevated privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install honeycombio
镜像加速npx clawhub@latest install honeycombio --registry https://cn.longxiaskill.com镜像同步中