📦 Signalfx — 实用工具
v1.0.3集成. 管理 数据, records, 和 自动化 workflows. Use when 用户 wants interact 使用 SignalFx 数据.
0· 139·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions, requirements, and actions are consistent with a SignalFx integration that uses the Membrane CLI; nothing requested or instructed appears unrelated to its stated purpose.
评估建议
This skill appears internally consistent: it relies on the Membrane CLI and a Membrane account to manage SignalFx connections and actions. Before installing or running the CLI, verify you trust Membrane (@membranehq on npm and getmembrane.com) and review their privacy/security documentation — action descriptions and any data you pass will be sent to their service. Installing a global npm package has typical supply-chain risks, so prefer using npx or verifying the package/version and repository i...详细分析 ▾
✓ 用途与能力
The name/description (SignalFx integration) aligns with the instructions: it uses the Membrane CLI to create connections, list actions, create/run actions, and manage SignalFx data. There are no unrelated credentials, binaries, or config paths requested.
✓ 指令范围
SKILL.md stays on-task: it instructs installing the Membrane CLI, performing login/connect flows, discovering and running actions. It does not instruct the agent to read arbitrary local files, unrelated env vars, or to transmit data to unknown endpoints beyond Membrane.
ℹ 安装机制
There is no formal install spec in the registry (instruction-only), but SKILL.md tells the user to run npm install -g @membranehq/cli or use npx. This is coherent for a CLI-driven skill, but installing global npm packages carries supply-chain risk; the skill itself does not embed downloads from unknown hosts.
✓ 凭证需求
The skill declares no required environment variables, no primary credential, and requires a Membrane account via interactive login. Requested access is proportional to the integration's operation.
✓ 持久化与权限
The skill is not always-enabled and allows normal user invocation. It does not request persistent system-wide changes or other skills' configurations in its instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install signalfx
镜像加速npx clawhub@latest install signalfx --registry https://cn.longxiaskill.com镜像同步中