by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent, but before installing:
- Understand that using it requires trusting the Membrane service: Membrane will receive and act on requests you proxy (including any data you send to Selenium endpoints).
- The SKILL.md asks you to run `npm install -g @membranehq/cli`; verify the package name, author, and release (use a known version rather than always installing latest) and consider a local or containerized environment if you worry about supply-chain risk.
- Avoid sending highly s...详细分析 ▾
✓ 用途与能力
Name/description match the instructions: the skill is an adapter that tells the agent to use the Membrane CLI to interact with Selenium endpoints. No unrelated env vars, binaries, or config paths are requested. The SKILL.md does note that a Membrane account and network access are required (reasonable for a cloud proxy integration).
ℹ 指令范围
Instructions are limited to installing the Membrane CLI, logging in, creating/using a connector, running pre-built actions, and proxying requests via Membrane. They do not instruct reading local files or unrelated system state. Note: the skill explicitly routes requests through Membrane, so any data or API calls you make via 'membrane request' will be visible to the Membrane service — this is expected but important to understand.
ℹ 安装机制
No built-in install spec in the registry; SKILL.md instructs global npm install (-g @membranehq/cli). Using npm is common and coherent with the described workflow, but globally installing an npm package runs third-party code on the machine and has the usual supply-chain risks. The instruction-only nature of the skill means no code is written by the skill itself.
✓ 凭证需求
The skill declares no required env vars or secrets; it relies on Membrane to manage credentials server-side. This is proportionate. Users should note the tradeoff: Membrane will hold and use the credentials for Selenium and will proxy requests on your behalf.
✓ 持久化与权限
always:false and no config paths or system-wide changes are requested. The skill does not request elevated persistence or to modify other skills. Autonomous invocation by the model is allowed by platform default and is not combined with other concerning privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/23
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install selenium
镜像加速npx clawhub@latest install selenium --registry https://cn.longxiaskill.com