← 返回 Skills 市场
Pumble
作者
Membrane Dev
· GitHub ↗
· v1.0.3
· MIT-0
172
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install pumble
功能描述
Pumble integration. Manage Workspaces. Use when the user wants to interact with Pumble data.
安全使用建议
This skill is coherent: it uses the Membrane CLI to connect to Pumble and does not ask for unrelated secrets. Before installing, verify the @membranehq/cli package on npm/GitHub to ensure you trust the publisher; consider using npx (or a local install) rather than npm -g to avoid adding a global binary. Ensure you are comfortable granting network access and logging into a Membrane account, and only create connections for services you trust.
功能分析
Type: OpenClaw Skill
Name: pumble
Version: 1.0.3
The skill bundle (SKILL.md) requires high-risk operations including global installation of a third-party CLI (`npm install -g @membranehq/cli`) and the dynamic creation and execution of remote actions via the Membrane platform. While these capabilities are aligned with the stated purpose of Pumble integration, the reliance on external code execution, shell-based authentication, and broad network access meets the threshold for a suspicious classification under the provided criteria.
能力评估
Purpose & Capability
The name/description say 'Pumble integration' and the SKILL.md consistently instructs the agent to use Membrane's CLI to connect to Pumble, discover actions, and run them. Required capabilities (network + Membrane account) align with the stated purpose.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in, creating connections, listing and running actions, and polling build state. The document does not instruct reading unrelated files, accessing unrelated environment variables, or exfiltrating data to arbitrary endpoints beyond Membrane/Pumble.
Install Mechanism
There is no formal install spec in the registry entry; the SKILL.md tells users to run npm install -g @membranehq/cli@latest (or npx calls). This pulls code from the public npm registry (moderate risk but expected for a CLI). Recommend verifying the package/source (GitHub and npm) before global installation or using npx to avoid a global install.
Credentials
The skill declares no required environment variables or credentials. The only external requirement is a Membrane account (the CLI handles auth). This is proportionate to the connector's functionality; no unrelated secrets are requested.
Persistence & Privilege
The skill is instruction-only, has no install-time hooks, and is not always:true. It does not request persistent/privileged presence or modify other skills' configs. The skill being invocable and allowed to run autonomously is the platform default and not problematic here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pumble - 安装完成后，直接呼叫该 Skill 的名称或使用
/pumble触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Pumble 是什么？
Pumble integration. Manage Workspaces. Use when the user wants to interact with Pumble data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 172 次。
如何安装 Pumble？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pumble」即可一键安装，无需额外配置。
Pumble 是免费的吗？
是的，Pumble 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pumble 支持哪些平台？
Pumble 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pumble？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.3。
推荐 Skills