by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent, but take these precautions before installing/using it: 1) Verify the @membranehq/cli npm package/publisher (use npmjs.org and the project's GitHub) before doing a global install — prefer npx to avoid installing global binaries. 2) Expect the login flow to open a browser or present an authorization URL; do not paste credentials or long-lived tokens into chat. 3) Confirm you trust Membrane/getmembrane.com as the service that will manage your connections and tokens. 4) ...详细分析 ▾
✓ 用途与能力
The name/description (Mamo Business integration) match the runtime instructions: all commands are centered on the Membrane CLI and a mamo-business connector. Nothing in the SKILL.md asks for unrelated cloud credentials or unrelated tooling.
✓ 指令范围
All runtime instructions are limited to installing/using the Membrane CLI, logging in, creating a connection, discovering and running actions. The instructions do not direct the agent to read arbitrary local files, harvest unrelated environment variables, or exfiltrate data to unexpected endpoints.
ℹ 安装机制
The README recommends installing @membranehq/cli from the public npm registry (or using npx). This is a common, expected distribution method for a CLI but carries the usual moderate risk of third‑party npm packages — the skill itself contains no install spec or bundled code.
✓ 凭证需求
The skill declares no required env vars or credentials and explicitly instructs to let Membrane manage auth (do not ask users for API keys). The authentication flow is via Membrane's login (browser/authorization URL), which is proportionate to the described function.
✓ 持久化与权限
always is false and there is no install script or code that would alter other skills or system-wide settings. The skill is instruction-only and does not request permanent presence or elevated privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/3/21
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mamo-business
镜像加速npx clawhub@latest install mamo-business --registry https://cn.longxiaskill.com