← 返回 Skills 市场
membranedev

Sonix

作者 Membrane Dev · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
132
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install sonix
功能描述
Sonix integration. Manage Deals, Persons, Organizations, Leads, Projects, Activities and more. Use when the user wants to interact with Sonix data.
安全使用建议
There is a clear mismatch between the registry description (CRM-style text) and the SKILL.md (Sonix transcription via Membrane). Before installing or using this skill: 1) Confirm with the publisher/registry that this skill really targets Sonix and that the metadata isn't a copy/paste error. 2) Understand that using the skill requires a Membrane account and will send action descriptions and any inputs to Membrane's service — review Membrane's privacy/security docs if you'll send sensitive data. 3) Prefer npx or inspect the @membranehq/cli package source rather than blindly running a global 'npm install -g' of the latest tag to reduce supply-chain risk. 4) Verify the Sonix connector exists in your Membrane tenant and what data the connector will access; don't provide unrelated API keys or secrets. If you need higher assurance, ask the publisher for a brief justification of the metadata mismatch and for an explicit privacy statement about what gets transmitted to Membrane.
功能分析
Type: OpenClaw Skill Name: sonix Version: 1.0.3 The skill provides instructions for an AI agent to interact with the Sonix transcription service using the Membrane CLI. While there is a minor metadata discrepancy in SKILL.md (the description field incorrectly mentions CRM entities like 'Deals' and 'Leads' while the body correctly describes Sonix transcription), the instructions are consistent with the legitimate use of the Membrane framework (getmembrane.com). The skill relies on the '@membranehq/cli' npm package for authentication and API interaction, and no evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill name and the SKILL.md describe Sonix (transcription service). However the registry-level description claims 'Manage Deals, Persons, Organizations, Leads, Projects, Activities' (CRM-like) which is inconsistent with Sonix. This mismatch suggests copy/paste or mislabeling and makes the intended purpose unclear.
Instruction Scope
Instructions are confined to installing/using the Membrane CLI and creating/listing/running 'actions' against a Sonix connector. They do require network access and a Membrane account; Membrane will handle authentication and action execution. The skill delegates auth and API calls to Membrane, which means user data and action descriptions may be transmitted to Membrane's servers — this is expected for this design but worth noticing.
Install Mechanism
There is no registry install spec (instruction-only), but SKILL.md recommends 'npm install -g @membranehq/cli@latest' or using npx. Installing a global npm package or running npx uses the public npm registry (supply-chain risk if you don't trust the package). This is proportionate for a CLI-driven integration but carries the usual risks of running third-party npm code.
Credentials
The skill declares no required environment variables or credentials and explicitly tells users not to hand over API keys because Membrane manages auth. That is coherent with using a hosted broker. However the top-level metadata mismatch (CRM phrasing) raises questions about whether additional credentials or scopes might actually be needed in some variants — confirm before granting broad access. The SKILL.md itself does not attempt to read local env/config paths.
Persistence & Privilege
always is false; the skill does not request persistent system-wide privileges and doesn't include an install spec that would write files. Autonomous invocation (disable-model-invocation: false) is allowed but is the platform default — be mindful the agent could call Membrane APIs autonomously if invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install sonix
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /sonix 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug sonix
版本 1.0.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Sonix 是什么?

Sonix integration. Manage Deals, Persons, Organizations, Leads, Projects, Activities and more. Use when the user wants to interact with Sonix data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 132 次。

如何安装 Sonix?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install sonix」即可一键安装,无需额外配置。

Sonix 是免费的吗?

是的,Sonix 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Sonix 支持哪些平台?

Sonix 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Sonix?

由 Membrane Dev(@membranedev)开发并维护,当前版本 v1.0.3。

💬 留言讨论