by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and limited to using the Membrane CLI to talk to Branch. Before installing: (1) verify the @membranehq/cli package on npm/GitHub to ensure it’s the official CLI, or use `npx` to avoid a global install; (2) be prepared for a browser-based login flow (or headless completion flow) since Membrane handles auth; (3) understand that Membrane will hold/access Branch credentials on your behalf — only grant the connection scopes you need; (4) if you have strict policies about i...详细分析 ▾
✓ 用途与能力
The skill claims to integrate with Branch and all runtime instructions use the Membrane CLI to discover connections, run actions, and proxy API requests to Branch. Required network access and a Membrane account are consistent with that purpose; no unrelated credentials, binaries, or config paths are requested.
✓ 指令范围
SKILL.md only instructs installing and using the Membrane CLI (login, connect, action list/run, request proxy). It doesn't ask the agent to read local files, harvest unrelated env vars, or send data to unexpected endpoints; proxied requests go through Membrane as documented.
ℹ 安装机制
There is no formal install spec (instruction-only). It recommends installing @membranehq/cli via `npm install -g`, which is a public npm package — a typical approach but carries the usual npm-global risks. Recommend verifying the package source (npm/GitHub) or using `npx`/local install to avoid a global install if you prefer.
✓ 凭证需求
The skill declares no required environment variables or local credentials. It relies on Membrane to handle auth server-side and explicitly advises not to ask users for API keys, which is proportionate for a connector-style integration.
✓ 持久化与权限
always is false and there are no install steps that modify other skills or system-wide configs. The skill allows autonomous invocation (platform default), which is expected for operational skills and is not by itself a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install branch
镜像加速npx clawhub@latest install branch --registry https://cn.longxiaskill.com