by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent: it instructs using the Membrane CLI to connect to PlanetScale rather than embedding credentials. Before using it, confirm you trust the Membrane project and the @membranehq/cli package (check the npm package page and GitHub repo, review maintainers and recent activity). If you prefer not to install a global npm package, use the npx examples or run the CLI in a disposable container. When completing the browser-based login, ensure the URL and tenant you authenticate to are ...详细分析 ▾
✓ 用途与能力
The skill says it integrates with PlanetScale and all runtime instructions center on using the Membrane CLI to create connections, list actions, run actions, or proxy requests to PlanetScale — this is proportionate to the claimed purpose.
✓ 指令范围
SKILL.md only instructs running the Membrane CLI (login, connect, action list/run, request proxy). It does not instruct reading arbitrary files, exfiltrating environment variables, or accessing unrelated services. The guidance to use the proxy to call PlanetScale APIs is expected for this integration.
ℹ 安装机制
There is no declared install spec in the skill bundle (instruction-only), but the documentation tells the user/agent to run `npm install -g @membranehq/cli` (and also suggests `npx` in examples). Installing a global npm package is a normal way to obtain a CLI, but it does require trusting the @membranehq/cli package and the npm registry — verify the package source and integrity before installing globally.
✓ 凭证需求
The skill declares no required environment variables or credentials and advises letting Membrane manage credentials server-side. It does not request unrelated secrets or config paths, which is proportionate for a connector-style integration.
✓ 持久化与权限
The skill is not set to always:true and is user-invocable (default). It doesn't request persistent system-level changes or attempt to modify other skills' configs. Autonomous invocation is allowed by platform default and is not, by itself, a concern here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install planetscale
镜像加速npx clawhub@latest install planetscale --registry https://cn.longxiaskill.com