← 返回 Skills 市场
membranedev

Spotlightr

作者 Membrane Dev · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ✓ 安全检测通过
174
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install spotlightr
功能描述
Spotlightr integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Spotlightr data.
安全使用建议
This skill appears to do what it says: it uses the Membrane CLI to access Spotlightr. Before installing: 1) Review the @membranehq/cli package and its GitHub repo to confirm the source and recent changes; 2) avoid running global installs as a privileged user (use a managed environment, container, or a user-level install if possible); 3) when authenticating, use least-privileged credentials or a scoped integration account rather than your personal admin keys; 4) be aware the CLI will store tokens/config locally — treat those as sensitive; 5) if you cannot verify the npm package, consider running it in an isolated environment or asking the skill author for more details. If you can provide the remainder of the SKILL.md (it was truncated), I can reassess with higher confidence.
功能分析
Type: OpenClaw Skill Name: spotlightr Version: 1.0.3 The spotlightr skill bundle provides instructions for an AI agent to interact with the Spotlightr video platform using the Membrane CLI. The SKILL.md file outlines standard procedures for authentication, connection management, and executing actions via the 'membrane' command-line tool. While the documentation contains an unusually long and repetitive list of keywords and concepts, there is no evidence of malicious intent, data exfiltration, or unauthorized command execution.
能力标签
cryptocan-make-purchasesrequires-sensitive-credentials
能力评估
Purpose & Capability
Name/description say 'Spotlightr integration' and the SKILL.md instructs use of the Membrane CLI to interact with Spotlightr. Required capabilities (network, Membrane account) align with that purpose and no unrelated secrets or binaries are requested.
Instruction Scope
The instructions direct the user/agent to install and run the @membranehq CLI and to authenticate via Membrane (the file is truncated but visible steps show a login command). This stays within the scope of talking to Spotlightr, but it gives the CLI control over auth flows and will cause credential material to be handled/stored by that CLI (not by the skill). No instructions were observed that ask the agent to read unrelated local files or exfiltrate data to unknown endpoints.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run 'npm install -g @membranehq/cli@latest'. Installing an npm CLI globally is a common pattern but has moderate risk: npm packages can run install scripts and a global install writes binaries to disk and alters PATH. The source referenced (membrane) appears legitimate, but users should verify the published package and its repository before installing.
Credentials
The skill declares no required environment variables or credentials in the registry metadata. It does require a Membrane account and the CLI's authentication flow (interactive or token-based), which is proportionate for a service integration. Be aware that authentication will likely grant the CLI access to Spotlightr data and the CLI may persist tokens locally.
Persistence & Privilege
Skill flags do not request always:true and the skill is user-invocable only. However, following the SKILL.md will install a persistent CLI binary and will cause the CLI to persist auth tokens/config on disk — this is expected for a CLI integration but is a persistence risk to consider outside the skill itself.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install spotlightr
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /spotlightr 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug spotlightr
版本 1.0.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Spotlightr 是什么?

Spotlightr integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Spotlightr data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 174 次。

如何安装 Spotlightr?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotlightr」即可一键安装,无需额外配置。

Spotlightr 是免费的吗?

是的,Spotlightr 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Spotlightr 支持哪些平台?

Spotlightr 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Spotlightr?

由 Membrane Dev(@membranedev)开发并维护,当前版本 v1.0.3。

💬 留言讨论