by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions and requirements are consistent with a Uniify integration that uses the Membrane CLI; nothing requested is disproportionate to the stated purpose.
评估建议
This skill is coherent and does what it says: it teaches you to use the Membrane CLI to manage Uniify data. Before installing or running commands: (1) verify the legitimacy of the @membranehq package and its homepage/repository, (2) prefer using npx for one-off runs if you don't want a global npm install, (3) be aware that logging in grants the CLI the same permissions as the connected account and the 'membrane request' command can execute arbitrary API calls to Uniify via the proxy, and (4) avo...详细分析 ▾
✓ 用途与能力
Name/description (Uniify integration) matches the runtime instructions: all actions are performed via the Membrane CLI which proxies Uniify APIs and manages auth. The skill does not request unrelated credentials, binaries, or config paths.
ℹ 指令范围
Instructions are scoped to installing and using the Membrane CLI (login, create/list connections, run actions, and proxy requests). One noteworthy behavior: the documented 'membrane request' command can forward arbitrary paths to the Uniify API via the Membrane proxy, so the CLI (once authenticated) can perform any API calls the connected account permits — this is expected for an integration but worth awareness.
ℹ 安装机制
There is no automatic installer in the registry metadata; the SKILL.md recommends installing @membranehq/cli via npm (global install or npx). That is a standard public npm package install (moderate risk compared to no install), but installation is manual and traceable to the @membranehq package on npm/GitHub. Users should verify the package source before global install.
✓ 凭证需求
The skill declares no required env vars or credentials and explicitly instructs users not to share API keys (advising to create Membrane connections instead). The lack of requested secrets is proportionate to the described behavior.
✓ 持久化与权限
The skill is instruction-only, does not request persistent presence (always:false), and does not attempt to modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/9
Auto sync from membranedev/application-skills
● 无害
安装命令 点击复制
官方npx clawhub@latest install uniify
镜像加速npx clawhub@latest install uniify --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制