📦 Square — 支付处理
v1.0.3Square支付处理服务，支持信用卡支付、移动支付和在线交易处理。
0· 357·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only skill that delegates Square integration to the Membrane CLI; its requested actions (installing the CLI and using its auth/connect flows) are consistent with the stated purpose and it does not request unrelated credentials or filesystem access.
评估建议
This skill is an instruction-only wrapper around the Membrane CLI for Square — before installing: (1) verify the npm package @membranehq/cli is from a source you trust (check the package page and repository), (2) be aware that you will authenticate via Membrane and grant it access to Square data (review OAuth scopes and consent screens), (3) prefer installing the CLI in a controlled environment (avoid running global installs as root on production systems), and (4) the SKILL.md contains a lot of ...详细分析 ▾
✓ 用途与能力
The skill's name/description (Square integration) matches the runtime instructions: it tells the agent/user to install and use the Membrane CLI to connect to Square and call actions. Requiring the Membrane CLI is reasonable for a Membrane-backed integration.
ℹ 指令范围
The SKILL.md stays within scope: it instructs installing a CLI, logging in (interactive or headless), creating a Square connection, and searching/executing actions. It does not ask the agent to read arbitrary files, environment variables, or exfiltrate data. There is some noisy/irrelevant copy-paste content (long repeated 'Recipe ...' list) which is sloppy but not directly dangerous.
ℹ 安装机制
No install spec in the registry; the doc asks the user to install @membranehq/cli via npm -g. Global npm installs are a common mechanism but carry normal risks (trusting the package author). There are no downloads from untrusted URLs or archive extraction steps.
✓ 凭证需求
The skill does not request environment variables or credentials in the registry metadata. Authentication is delegated to Membrane's interactive/login flow. This is proportionate, but it does mean you must trust Membrane (and any OAuth scopes it requests) to access your Square data.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent config paths or elevated privileges. Autonomous model invocation is allowed (platform default) but not combined with other concerning flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/3/6
Auto sync from membranedev/application-skills
● 无害
安装命令
点击复制官方npx clawhub@latest install square
镜像加速npx clawhub@latest install square --registry https://cn.longxiaskill.com