← 返回 Skills 市场
gora050

Strongdm

作者 Vlad Ursul · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
108
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install strongdm
功能描述
StrongDM integration. Manage data, records, and automate workflows. Use when the user wants to interact with StrongDM data.
安全使用建议
This skill appears to do what it says (use Membrane to interact with StrongDM), but the SKILL.md instructs installing a global npm CLI even though the registry metadata lists no install requirements — a metadata mismatch. Before installing or running commands: 1) Verify the @membranehq/cli npm package (publisher, npm page, GitHub repository) and read recent release notes; 2) Prefer installing/testing the CLI in a container or isolated environment instead of a host-global npm -g install; 3) Confirm you trust Membrane/getmembrane.com and understand that login will open a browser or provide an auth URL; 4) If you cannot or do not want to install the CLI, ask the skill author to provide an explicit install spec and to declare required binaries (node/npm/npx) in the metadata. If you want higher assurance, request the skill be converted into an install-specified skill that the platform can vet automatically.
功能分析
Type: OpenClaw Skill Name: strongdm Version: 1.0.1 The skill bundle provides instructions for an AI agent to interact with StrongDM via the Membrane CLI. It includes standard procedures for installation (npm install -g @membranehq/cli), authentication, and resource management without any evidence of malicious intent or obfuscation. The instructions in SKILL.md specifically advocate for secure credential handling by offloading authentication to the Membrane platform and avoid asking the user for sensitive API keys.
能力评估
Purpose & Capability
Name and description (StrongDM integration) align with the runtime instructions, which use Membrane to talk to StrongDM. However, the skill metadata declares no required binaries or install steps, while the SKILL.md explicitly requires npm/npx and the @membranehq/cli. This mismatch is unexpected but plausibly benign (author omitted metadata).
Instruction Scope
The instructions stay within the stated purpose: install the Membrane CLI, run membrane login, create a connection to StrongDM, discover and run actions. The SKILL.md does not instruct reading unrelated files, exporting arbitrary data, or prompting for unrelated credentials; it explicitly advises not to ask users for API keys.
Install Mechanism
There is no declared install spec in the registry metadata, but the SKILL.md instructs users to run `npm install -g @membranehq/cli@latest` (and uses npx). Installing a global npm package is a networked install that writes to disk and runs third-party code from the public npm registry — a moderate-risk action. The missing install declaration is an incoherence that warrants extra caution (verify the package source, integrity, and publisher).
Credentials
The skill requests no environment variables or credentials in metadata. The runtime flow uses Membrane for auth (browser-based login) and does not ask for unrelated secrets. Requiring a Membrane account and interactive login is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-on and does not request elevated platform privileges. It does not instruct modifying other skills or global agent configs. Autonomous invocation is allowed (platform default) but is not combined with other major red flags here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install strongdm
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /strongdm 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug strongdm
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Strongdm 是什么?

StrongDM integration. Manage data, records, and automate workflows. Use when the user wants to interact with StrongDM data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 108 次。

如何安装 Strongdm?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install strongdm」即可一键安装,无需额外配置。

Strongdm 是免费的吗?

是的,Strongdm 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Strongdm 支持哪些平台?

Strongdm 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Strongdm?

由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.1。

💬 留言讨论