by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent, but follow normal precautions before installing/running the Membrane CLI: verify the @membranehq/cli package and version from the official source, avoid global installs as root on shared machines, and confirm you trust the Membrane service and its privacy policy since Flinks financial data will be proxied through it. If you prefer, install the CLI locally or inspect the package repository first. Note that the agent can invoke this skill autonomously under normal plat...详细分析 ▾
✓ 用途与能力
Name/description match the instructions: the skill is a Flinks integration that routes calls via the Membrane CLI/proxy. Requiring a Membrane account and network access is coherent with the stated purpose.
✓ 指令范围
SKILL.md instructs the agent/operator to install and use the Membrane CLI, create connections, list actions, run actions, and proxy requests to the Flinks API. It does not instruct reading unrelated files, exporting environment variables, or exfiltrating data to unexpected endpoints. All commands and workflows stay within the documented Flinks-via-Membrane scope.
ℹ 安装机制
This is an instruction-only skill (no install spec), but the runtime instructions recommend installing @membranehq/cli via npm (npm install -g). Installing a public npm CLI is a reasonable and expected step for this integration, but it carries the usual supply-chain/privilege considerations of global npm installs (verify package, version, and install as appropriate user).
✓ 凭证需求
The skill declares no required env vars, no config paths, and the instructions explicitly say not to request API keys (Membrane handles auth server-side). The requested access is minimal and proportional to the integration.
✓ 持久化与权限
always is false and the skill does not request persistent system-wide changes or modify other skills' configuration. Autonomous invocation is allowed (platform default); that is expected for a skill of this type.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/29
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install flinks
镜像加速npx clawhub@latest install flinks --registry https://cn.longxiaskill.com