← 返回 Skills 市场
Stackhawk
作者
Vlad Ursul
· GitHub ↗
· v1.0.3
· MIT-0
186
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install stackhawk
功能描述
StackHawk integration. Manage data, records, and automate workflows. Use when the user wants to interact with StackHawk data.
安全使用建议
This skill delegates StackHawk interactions to the Membrane platform and asks you to install/run the @membranehq CLI. Before installing or using it: (1) confirm you trust Membrane — review their privacy, data retention, and security documentation because your StackHawk data and connection metadata will be proxied through their service; (2) prefer using npx or a pinned package version rather than a global `npm install -g @membranehq/cli@latest`; (3) verify the npm package and the GitHub repository listed in SKILL.md match the official Membrane project; (4) avoid using this with highly sensitive production secrets until you understand how Membrane stores and scopes credentials; and (5) if you want the agent to operate autonomously, explicitly review what actions the agent will run and consider restricting autonomous invocation or requiring manual approval for destructive operations.
功能分析
Type: OpenClaw Skill
Name: stackhawk
Version: 1.0.3
The skill bundle provides instructions for an AI agent to integrate with StackHawk using the Membrane CLI. The SKILL.md file outlines standard procedures for installation, authentication, and executing security scans via the 'membrane' command-line tool. No malicious logic, data exfiltration attempts, or harmful prompt injections were found; the instructions actually encourage secure practices by advising the agent to let the external service handle credential management rather than requesting secrets from the user.
能力评估
Purpose & Capability
The skill claims to integrate with StackHawk but all runtime instructions route actions through the Membrane platform/CLI. That is a plausible design (Membrane acts as a connector), but the registry metadata and SKILL.md do not explicitly state that StackHawk access will be proxied via Membrane servers — users should understand that data and credentials will be managed by Membrane rather than being used directly by the agent.
Instruction Scope
SKILL.md instructs the operator to install and run the @membranehq/cli, perform interactive (or headless URL-based) login, create connections, and run actions. Those steps implicitly transmit connection metadata and action inputs to the Membrane service. The instructions do not describe what data is sent to Membrane, retention, or privacy/security implications. While the commands themselves are limited to the stated integration task, the lack of explicit data-flow/privilege disclosure is a scope concern.
Install Mechanism
The registry has no install spec, but SKILL.md asks users to run `npm install -g @membranehq/cli@latest` (or use npx). Installing a global npm package is a moderate-risk operation (writes to system PATH) and pulls code from the public npm registry; the SKILL.md does not recommend verifying package provenance or provide pinned versions. This is expected for a CLI-based integration but should be reviewed before global installation.
Credentials
The skill declares no required environment variables or local credentials and the instructions emphasise that Membrane manages auth server-side. That aligns with the stated purpose. However, because credentials and action payloads will be handled by Membrane, the user must be comfortable delegating access to a third party.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request elevated platform privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined here with other high-risk factors.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stackhawk - 安装完成后,直接呼叫该 Skill 的名称或使用
/stackhawk触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Stackhawk 是什么?
StackHawk integration. Manage data, records, and automate workflows. Use when the user wants to interact with StackHawk data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 186 次。
如何安装 Stackhawk?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stackhawk」即可一键安装,无需额外配置。
Stackhawk 是免费的吗?
是的,Stackhawk 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Stackhawk 支持哪些平台?
Stackhawk 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Stackhawk?
由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.3。
推荐 Skills