← 返回 Skills 市场
Qwilr
作者
Membrane Dev
· GitHub ↗
· v1.0.3
· MIT-0
174
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install qwilr
功能描述
Qwilr integration. Manage Accounts. Use when the user wants to interact with Qwilr data.
安全使用建议
Do not install or enable this skill until these questions are answered: (1) How exactly does the skill authenticate? Which environment variables or token names does it need (e.g., MEMBRANE_API_KEY)? (2) Does it call Qwilr's official API endpoints or route requests through getmembrane.com or another third party? (3) What exact Qwilr data is read, modified, or transmitted? (4) Why does the SKILL.md include large unrelated content — is there a trimmed version with only runtime instructions? If the publisher cannot clearly explain where credentials are stored and which endpoints are contacted, treat the skill as risky. If you proceed, test in a restricted account with minimal privileges and monitor outbound network traffic and the tokens you provide.
功能分析
Type: OpenClaw Skill
Name: qwilr
Version: 1.0.3
The skill bundle for Qwilr integration contains an extremely large and redundant list of keywords in SKILL.md, repeating the same blocks of document types hundreds of times. This is a characteristic of context-stuffing or resource-exhaustion attacks designed to bloat the agent's context window and increase token usage. While the functional instructions for the Membrane CLI (e.g., 'membrane login', 'membrane connect') appear aligned with the stated purpose, the metadata in _meta.json contains a future-dated publication timestamp (April 2026), which is often a sign of automated or non-standard generation.
能力标签
能力评估
Purpose & Capability
The skill is named and described as a Qwilr integration, but the SKILL.md and metadata reference a Membrane account/homepage (https://getmembrane.com / membranedev repo). The registry entry declares no required credentials or primary credential even though the SKILL.md explicitly says a valid Membrane account is required. This mismatch between claimed purpose (Qwilr) and the integration surface (Membrane) is incoherent.
Instruction Scope
SKILL.md header states 'Requires network access and a valid Membrane account', but the package does not declare how credentials are provided. The instruction file, as provided, is very long and includes many generic, unrelated items (legal/policy, templates, document types), suggesting either a poor copy/paste or overly broad instructions. Because the skill is instruction-only, whatever it tells the agent to do at runtime is the entire attack surface; the existing instructions are vague about where API calls go and what data is required or transmitted.
Install Mechanism
No install spec and no code files (instruction-only). That reduces filesystem write/execution risk since nothing is downloaded or executed by default.
Credentials
Registry metadata lists zero required environment variables or primary credential, but SKILL.md requires a Membrane account. A typical integration that needs an external service would declare the specific credential (e.g., MEMBRANE_API_KEY) — the absence is inconsistent and could hide where/how credentials are provided or expected.
Persistence & Privilege
always is false and there are no config paths or install steps that request persistent system changes. The skill does not request elevated persistence in the provided metadata.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install qwilr - 安装完成后,直接呼叫该 Skill 的名称或使用
/qwilr触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Qwilr 是什么?
Qwilr integration. Manage Accounts. Use when the user wants to interact with Qwilr data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 174 次。
如何安装 Qwilr?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qwilr」即可一键安装,无需额外配置。
Qwilr 是免费的吗?
是的,Qwilr 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Qwilr 支持哪些平台?
Qwilr 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Qwilr?
由 Membrane Dev(@membranedev)开发并维护,当前版本 v1.0.3。
推荐 Skills