← 返回 Skills 市场
membranedev

Precoro

作者 Membrane Dev · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
105
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install precoro
功能描述
Precoro integration. Manage data, records, and automate workflows. Use when the user wants to interact with Precoro data.
安全使用建议
Before installing, verify how this skill connects to Precoro: does it call Precoro's API directly or route data through Membrane (getmembrane.com)? Ask the publisher to: (1) provide the full SKILL.md runtime steps, network endpoints, and what data is transmitted; (2) declare the exact environment variables or tokens it needs and whether those are stored; (3) publish the source repository and privacy/security documentation. Do not supply production Precoro or financial credentials until you confirm the data flow and trust the third-party Membrane service; if possible, test with a limited non-production account and monitor network traffic/logs.
功能分析
Type: OpenClaw Skill Name: precoro Version: 1.0.1 The skill contains an unusually large and largely irrelevant list of keywords in SKILL.md (ranging from procurement terms to 'Zero-Day Exploit', 'Information Warfare', and 'Quantum Cryptography'), which serves as a form of context stuffing or prompt injection. Furthermore, it instructs the agent to install a global npm package (@membranehq/cli) and use a third-party service that dynamically generates and executes 'actions' based on natural language descriptions, introducing significant supply chain risks and unverified code execution paths.
能力标签
cryptorequires-walletcan-make-purchasesrequires-sensitive-credentials
能力评估
Purpose & Capability
The skill is named 'Precoro' and says it integrates with Precoro, but the SKILL.md compatibility line and homepage point to the Membrane platform (getmembrane.com). The registry metadata declares no required environment variables or primary credential, yet the runtime instructions explicitly state a valid Membrane account is required. It's unclear whether the skill will talk directly to Precoro's API (api.precoro.com) or proxy requests through Membrane; requiring a third-party Membrane account for a Precoro integration is unexpected and not justified in the registry metadata.
Instruction Scope
This is an instruction-only skill that declares 'Requires network access and a valid Membrane account.' Because there is no install and no code to inspect, the SKILL.md is the runtime policy — the file likely instructs the agent to send user data through Membrane endpoints. The registry does not declare what endpoints or environment variables will be used. That creates risk: the instructions may direct the agent to transmit procurement/financial data to an external service (Membrane) rather than directly to Precoro, and the skill does not declare or justify that data flow.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only. That minimizes disk-write/install risk. However, because behavior is defined only by prose, you must trust the instructions and any network calls they cause.
Credentials
Registry metadata lists no required environment variables or primary credential, but SKILL.md explicitly requires a 'valid Membrane account.' This mismatch is problematic: the skill either expects the user to supply credentials interactively at runtime or implicitly rely on platform-managed credentials. The absence of declared secrets makes it unclear what credentials will be needed or stored, which is disproportionate to the stated purpose (a direct Precoro integration would normally require Precoro API credentials).
Persistence & Privilege
The skill does not request always:true and is user-invocable (normal). It has no install script and doesn't claim to modify other skills or system-wide settings. No elevated persistence is requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install precoro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /precoro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug precoro
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Precoro 是什么?

Precoro integration. Manage data, records, and automate workflows. Use when the user wants to interact with Precoro data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 105 次。

如何安装 Precoro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install precoro」即可一键安装,无需额外配置。

Precoro 是免费的吗?

是的,Precoro 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Precoro 支持哪些平台?

Precoro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Precoro?

由 Membrane Dev(@membranedev)开发并维护,当前版本 v1.0.1。

💬 留言讨论