📦 Shipamax — 数据工作流管理
v1.0.1对接 Shipamax，集中管理数据与记录，自动化业务流程，一键完成数据交互与任务编排。
0· 59·0 当前·0 累计
by 下载技能包
最后更新
2026/4/8
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it says: it uses the Membrane CLI to access Shipamax without asking for extra secrets. Before installing, confirm you trust the @membranehq npm package and the Membrane service (review their homepage/repo), ensure you have Node/npm to install the CLI, and prefer running installs in a controlled environment (container or VM) if you are cautious. If you need higher assurance, ask the publisher for a direct link to the exact @membranehq/cli package repository or inspec...详细分析 ▾
✓ 用途与能力
The skill's name and description match the runtime instructions: it delegates Shipamax interactions to the Membrane CLI and documents actions for listing, connecting, and proxying requests to Shipamax. Nothing in the instructions asks for unrelated cloud credentials or access.
ℹ 指令范围
Instructions stay within the stated purpose (using Membrane to call Shipamax APIs). They require network access and a Membrane account and describe browser-based auth and a headless flow. They do not instruct the agent to read arbitrary local files or harvest unrelated environment variables. Note: the SKILL.md tells the user to install and run the Membrane CLI, which implies Node/npm must be available even though the registry metadata listed no required binaries.
ℹ 安装机制
This is an instruction-only skill (no install spec), but it instructs the user to run 'npm install -g @membranehq/cli' to get the CLI. Installing a global npm package is a normal approach but pulls code from the public npm registry — you should trust the @membranehq package and prefer installing from official sources or reviewing the package if you have concerns.
✓ 凭证需求
The skill declares no required environment variables and explicitly advises not to ask users for API keys; authentication is handled by Membrane. There are no unrelated credentials requested in the instructions.
✓ 持久化与权限
The skill does not request 'always: true' or other elevated persistence privileges and is user-invocable only. It does not instruct modifying other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/8
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install shipamax
镜像加速npx clawhub@latest install shipamax --registry https://cn.longxiaskill.com