by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent, but before installing or running the CLI: (1) confirm the @membranehq/cli package and getmembrane.com are the official vendor; (2) prefer using npx (or pin a specific CLI version) instead of an unrestricted global npm install to reduce supply-chain risk; (3) complete the browser-based OAuth flow rather than pasting secrets into chat; (4) review the Membrane privacy/security documentation to understand what data is proxied through their servers; and (5) if you need hi...详细分析 ▾
✓ 用途与能力
The SKILL.md describes a WhatsApp Business integration implemented via the Membrane CLI. All described actions (connectors, actions, proxy requests) map to the CLI usage shown; no unrelated services, binaries, or credentials are requested.
✓ 指令范围
Instructions are focused on installing and using the @membranehq/cli, logging in via browser, creating connections, listing actions, running actions, and proxying requests. They do not instruct the agent to read unrelated files, exfiltrate data, or access system paths beyond running the CLI and using the browser-based auth flow.
ℹ 安装机制
This is an instruction-only skill (no install spec), but it tells users to install @membranehq/cli via npm (global install or npx). Installing a third-party CLI from the public npm registry is a normal step for this integration but carries the usual npm-package trust considerations (verify package author, version, and integrity).
✓ 凭证需求
The skill declares no required environment variables or local credentials and explicitly recommends letting Membrane handle credentials server-side. That is proportionate to a connector/CLI-based integration.
✓ 持久化与权限
The skill does not request always:true or any system-level persistence. It is user-invocable and can be called autonomously per platform defaults; that default autonomous invocation is expected and not by itself concerning here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install whatsapp-by-online-live-support
镜像加速npx clawhub@latest install whatsapp-by-online-live-support --registry https://cn.longxiaskill.com