by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only integration that tells the agent to use the Membrane CLI to access PlanSo Forms; its requirements and instructions are coherent with that purpose.
评估建议
This skill is coherent: it simply tells the agent to use the Membrane CLI to interact with PlanSo Forms. Before installing or running it, verify the @membranehq/cli npm package and its publisher (check the npm page and the linked GitHub repo) to ensure you're comfortable running third-party code. Prefer using npx or installing in an isolated environment if you don't want a global install. Be aware that granting a Membrane connection lets that service act on your PlanSo Forms data (it manages aut...详细分析 ▾
✓ 用途与能力
The name/description (PlanSo Forms integration) matches the instructions: everything is about using the Membrane CLI to discover connectors/actions and proxy requests to PlanSo Forms. No unrelated credentials, binaries, or paths are requested.
✓ 指令范围
Runtime instructions are narrowly scoped to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying API calls. They do not instruct reading unrelated files or exfiltrating data. The proxy feature is documented and intended to reach PlanSo endpoints through Membrane.
ℹ 安装机制
The SKILL.md instructs a global npm install (@membranehq/cli), which is a normal way to obtain a CLI but does execute third-party code on the host. Because there is no packaged install spec in the registry, the installer step is purely advisory. This is expected for a CLI-based integration but you should verify the npm package and its publisher before installing.
✓ 凭证需求
No environment variables, secrets, or config paths are requested. The skill relies on the user's Membrane account for auth, which is appropriate; the SKILL.md explicitly warns not to ask users for API keys and to let Membrane manage credentials.
✓ 持久化与权限
The skill is instruction-only, always:false, and user-invocable. It does not request permanent platform presence or modify other skill configs. Normal autonomous invocation remains possible (platform default) but is not unusual here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/27
Revert refresh marker
● 无害
安装命令
点击复制官方npx clawhub@latest install planso-forms
镜像加速npx clawhub@latest install planso-forms --registry https://cn.longxiaskill.com镜像同步中