by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill delegates FormTitan access to the Membrane service and requires installing the @membranehq/cli npm package. Before installing or using it: 1) confirm you trust Membrane (review their privacy, data handling, and auth model) since FormTitan traffic and credentials will be proxied through their service; 2) if you prefer, install the CLI in an isolated environment (container or VM) instead of globally; 3) do not supply raw FormTitan API keys to the skill—use Membrane connections as instru...详细分析 ▾
✓ 用途与能力
Name/description match the instructions: the SKILL.md exclusively describes interacting with FormTitan via the Membrane CLI (listing actions, running actions, proxying requests). There are no unrelated credentials, binaries, or config paths requested.
✓ 指令范围
Instructions are specific to installing and using the Membrane CLI, logging in, creating/locating a FormTitan connection, listing/running actions, and optionally proxying raw API requests through Membrane. The doc does not instruct reading unrelated files or accessing unrelated environment variables. It explicitly advises against asking users for API keys (use Membrane connections instead).
ℹ 安装机制
This is an instruction-only skill (no install spec), but it tells users to run `npm install -g @membranehq/cli`. Installing a global npm CLI is a normal step for this integration but does execute third-party code on the host—users should ensure they trust the package and use appropriate environment isolation if concerned.
✓ 凭证需求
The skill declares no required environment variables or credentials. It relies on Membrane to manage auth, which is proportionate to the stated purpose. Be aware that using Membrane routes FormTitan credentials/requests through Membrane's service (expected for this design).
✓ 持久化与权限
Skill has no installs, no always:true, and does not request persistent system-wide changes. It is user-invocable and can be called autonomously per platform defaults, which is normal for skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/27
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install formtitan
镜像加速npx clawhub@latest install formtitan --registry https://cn.longxiaskill.com