← 返回 Skills 市场
gora050

Sonatype

作者 Vlad Ursul · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ 安全检测通过
119
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sonatype
功能描述
Sonatype integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sonatype data.
安全使用建议
This skill delegates Sonatype access to the Membrane platform and requires installing the @membranehq/cli npm package. Before installing: (1) verify the npm package and the publisher (@membranehq) on npm and the linked GitHub repository/homepage (https://getmembrane.com and the repo in SKILL.md). (2) Prefer installing the CLI in a sandbox/container or using npx for one-off runs if you are cautious about global npm installs. (3) Understand that authentication is handled by Membrane — you are trusting that service to manage Sonatype credentials and session tokens. (4) Ask the publisher to update registry metadata to list the required 'membrane' binary/install step so requirements align with the SKILL.md. If you trust Membrane and confirm package provenance, the skill is coherent; if not, avoid installing the global CLI or test in an isolated environment.
功能分析
Type: OpenClaw Skill Name: sonatype Version: 1.0.1 The skill bundle provides instructions for an AI agent to interact with Sonatype via the Membrane CLI. It guides the agent through installing the `@membranehq/cli` package, authenticating, and managing connections and actions. The instructions follow security best practices by advising the agent to use Membrane's connection system rather than requesting raw API keys from the user, and no malicious code or exfiltration patterns were found in the documentation or metadata.
能力评估
Purpose & Capability
The SKILL.md describes a Sonatype integration implemented via the Membrane platform/CLI, which is a plausible design. However the registry metadata lists no required binaries while the runtime instructions explicitly require installing and running the 'membrane' CLI (npm package @membranehq/cli). That mismatch should be corrected or explained by the publisher.
Instruction Scope
Instructions are focused: install the Membrane CLI, authenticate via 'membrane login', create/connect a Sonatype connector, discover and run actions. The skill does not instruct the agent to read unrelated files or environment variables, nor to exfiltrate arbitrary data. It explicitly advises not to ask users for API keys.
Install Mechanism
There is no install spec in the registry (instruction-only), but the SKILL.md tells users to run 'npm install -g @membranehq/cli@latest' and uses npx. Installing an npm global package is a normal approach but carries the usual risks of running third-party code; the package is from the public npm registry (moderate-trust), not an arbitrary URL. The absence of an explicit install spec in the registry is an inconsistency to note.
Credentials
The skill requests no environment variables or credentials directly; authentication is delegated to Membrane (browser/authorization flow). That is proportionate for a connector-based integration, but it does mean you must trust Membrane with the Sonatype credentials/session state it manages.
Persistence & Privilege
The skill is not always:true and does not request system config paths or persistent elevated privileges. Installing the Membrane CLI will create binaries on your system (npm global install), which is outside the skill registry metadata but not unusual. The skill itself does not request persistent agent-wide privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install sonatype
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /sonatype 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug sonatype
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Sonatype 是什么?

Sonatype integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sonatype data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 119 次。

如何安装 Sonatype?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install sonatype」即可一键安装,无需额外配置。

Sonatype 是免费的吗?

是的,Sonatype 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Sonatype 支持哪些平台?

Sonatype 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Sonatype?

由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.1。

💬 留言讨论