by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it describes a Web3Forms integration that uses the Membrane CLI for auth and proxying, and it does not request unrelated credentials or access.
评估建议
This skill appears to do what it says: it uses the Membrane CLI to connect to Web3Forms and run actions. Before installing, confirm you trust Membrane (its privacy/security practices) because form data and auth will flow through their service. Prefer invoking via npx to avoid global npm installs if you want to minimize system changes. Be prepared to authenticate through a browser (or the headless flow) and review the connector's requested permissions when creating the connection.详细分析 ▾
✓ 用途与能力
The name/description and runtime instructions align: the skill instructs the agent to use the Membrane CLI to discover/connect to a Web3Forms connector and run actions. There are no unrelated environment variables, binaries, or config paths requested.
ℹ 指令范围
Instructions are narrowly scoped to installing/using the Membrane CLI (login, connect, action list/run, request proxy). They do not instruct reading local files or unrelated env vars. Note: the guidance recommends using Membrane's proxy, which means form submission payloads will be routed through Membrane's service — this is expected for this integration but is a privacy/operational consideration the user should be aware of.
ℹ 安装机制
No install spec in the registry; the SKILL.md recommends installing the CLI via npm (-g) or using npx. Installing via npm is common/traceable (moderate risk); prefer using npx to avoid global installs if you want less system-wide change.
✓ 凭证需求
The skill declares no required env vars or secrets and relies on Membrane to handle credentials and browser-based login. That is proportionate to its purpose. It does require network access and a Membrane account (declared in the SKILL.md).
✓ 持久化与权限
always:false and no install writes or config path access are requested. The skill does not request elevated/persistent system privileges beyond using a CLI the user installs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/4/2
Revert refresh marker
● Pending
安装命令
点击复制官方npx clawhub@latest install web3forms-contact-forms-for-static-websites
镜像加速npx clawhub@latest install web3forms-contact-forms-for-static-websites --registry https://cn.longxiaskill.com