← 返回 Skills 市场
Saplingai
作者
Membrane Dev
· GitHub ↗
· v1.0.3
· MIT-0
266
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install saplingai
功能描述
Sapling.ai integration. Manage Organizations, Pipelines, Projects, Users, Filters. Use when the user wants to interact with Sapling.ai data.
安全使用建议
This skill appears coherent: it uses the Membrane CLI to connect to Sapling.ai and does not request unrelated credentials. Before installing, verify the Membrane CLI package and source (review https://github.com/membranedev/application-skills and the @membranehq/cli package on npm), consider pinning to a specific version instead of `@latest`, and be aware that installing a global npm package runs code from the registry. Also confirm you are comfortable granting Membrane a connection to your Sapling.ai account (review what data the connector will access) and use the least-privilege Membrane account possible.
功能分析
Type: OpenClaw Skill
Name: saplingai
Version: 1.0.3
The skill requires the agent to install a global npm package (@membranehq/cli) and relies on a third-party platform (Membrane) to dynamically generate and execute code via 'actions'. While this aligns with the stated integration purpose, the requirement for global software installation and the reliance on remote code generation/execution (via 'membrane action create') creates a significant attack surface and supply-chain risk. No direct evidence of intentional malice was found, but the high-privilege operations and external dependencies in SKILL.md warrant a suspicious classification.
能力评估
Purpose & Capability
The name/description (Sapling.ai integration) match the runtime instructions: the SKILL.md tells the agent to use the Membrane CLI to connect to Sapling.ai, discover and run actions. Required resources (network, a Membrane account) are consistent with this purpose.
Instruction Scope
Instructions are focused on installing/using the Membrane CLI, authenticating via browser/authorization code, creating connections, listing and running actions. They do not instruct reading unrelated files or exfiltrating data. Minor inconsistency: the doc suggests both a global npm install and uses npx for some commands; this is operationally odd but not a security red flag.
Install Mechanism
The skill is instruction-only and asks the user to run `npm install -g @membranehq/cli@latest` (or uses npx). This is a typical CLI install from the npm registry (no arbitrary URL downloads), but global npm installs execute remote code and using `@latest` means no pinned version; auditing or pinning the package version is recommended.
Credentials
The skill declares no required env vars or credentials and defers auth to Membrane (which is appropriate). It does not ask for unrelated secrets. Using a Membrane account is proportional to the stated functionality.
Persistence & Privilege
always is false; the skill is instruction-only and does not request persistent elevated privileges or to modify other skills' configurations. Autonomous invocation is allowed by default (normal) and is not combined with other concerning factors here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install saplingai - 安装完成后，直接呼叫该 Skill 的名称或使用
/saplingai触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Saplingai 是什么？
Sapling.ai integration. Manage Organizations, Pipelines, Projects, Users, Filters. Use when the user wants to interact with Sapling.ai data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 266 次。
如何安装 Saplingai？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install saplingai」即可一键安装，无需额外配置。
Saplingai 是免费的吗？
是的，Saplingai 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Saplingai 支持哪些平台？
Saplingai 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Saplingai？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.3。
推荐 Skills