← 返回 Skills 市场
Sapling
作者
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
120
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sapling
功能描述
Sapling integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sapling data.
安全使用建议
This skill appears coherent with its stated purpose, but follow normal precautions: 1) Verify the Membrane CLI package and publisher on the npm registry (and the vendor site https://getmembrane.com) before running npm install -g. 2) Prefer using npx or a locally installed CLI instead of global -g to limit system-wide changes. 3) Watch the browser-based login flow carefully and only paste codes/authorize in the official Membrane site. 4) Consider pinning to a specific CLI version rather than @latest for stability and auditability. 5) If you need higher assurance, review the CLI source repository and package integrity checksum before installing.
功能分析
Type: OpenClaw Skill
Name: sapling
Version: 1.0.1
The sapling skill is a legitimate integration for the Membrane platform, providing instructions for an AI agent to manage HR data via the @membranehq/cli. It follows standard OAuth and API interaction patterns in SKILL.md without any evidence of malicious intent, data exfiltration, or unauthorized access.
能力评估
Purpose & Capability
The name/description (Sapling integration) match the instructions: they use the Membrane CLI to connect to Sapling, discover actions, and run them. Required capabilities (network and a Membrane account) are consistent with this purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, performing login, creating/connecting connections, discovering actions, and running them. It does not instruct reading unrelated files, accessing unrelated environment variables, or sending data to unexpected endpoints.
Install Mechanism
Install recommendation is npm install -g @membranehq/cli@latest (and examples use npx). Installing a public npm CLI is a normal, expected mechanism for a CLI-based integration but carries standard supply-chain risks (npm packages can change). Using npx avoids global installs and is lower friction.
Credentials
The skill declares no environment variables or credentials. Authentication is delegated to Membrane (browser-based OAuth/code flow). This is proportionate to the integration; there are no requests for unrelated secrets.
Persistence & Privilege
The skill is instruction-only, has no install script writing files, and does not request always:true. It does not ask to modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sapling - 安装完成后，直接呼叫该 Skill 的名称或使用
/sapling触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Sapling 是什么？
Sapling integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sapling data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 120 次。
如何安装 Sapling？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sapling」即可一键安装，无需额外配置。
Sapling 是免费的吗？
是的，Sapling 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sapling 支持哪些平台？
Sapling 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sapling？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.1。
推荐 Skills