← 返回 Skills 市场
Sugarsync
作者
Vlad Ursul
· GitHub ↗
· v1.0.1
· MIT-0
109
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sugarsync
功能描述
SugarSync integration. Manage data, records, and automate workflows. Use when the user wants to interact with SugarSync data.
安全使用建议
This skill appears to do what it says: it uses the Membrane platform to access SugarSync. Before installing or running commands: 1) verify the Membrane site/repo (https://getmembrane.com / the referenced GitHub) to ensure you trust the CLI; 2) prefer running with `npx @membranehq/cli@<version>` or pin a specific version instead of `-g ...@latest` to reduce supply-chain/version risk; 3) be prepared to complete browser-based auth (you'll be asked to open a URL and enter a code); 4) don't paste unrelated secrets into chat — Membrane is intended to handle auth for you. If you need higher assurance, ask the publisher for a signed release or a pinned release SHA for the CLI package.
功能分析
Type: OpenClaw Skill
Name: sugarsync
Version: 1.0.1
The skill bundle provides instructions for an AI agent to interact with SugarSync using the Membrane CLI. It follows standard patterns for Membrane-based integrations, including CLI installation, authentication via OAuth flows, and action discovery. There are no indicators of malicious intent, data exfiltration, or prompt injection; the instructions specifically advise against asking users for secrets and rely on the Membrane platform to manage credentials securely.
能力评估
Purpose & Capability
Name and description match the runtime instructions: the skill delegates SugarSync access to the Membrane platform and CLI. Declared network and Membrane account requirements align with the stated purpose; no unrelated credentials or system resources are requested.
Instruction Scope
SKILL.md instructs only to install/use the Membrane CLI and run Membrane commands (login, connect, action list/create/run). It does not instruct the agent to read unrelated files, interrogate other environment variables, or exfiltrate data to unexpected endpoints. Headless auth flow is documented and requires explicit user interaction.
Install Mechanism
There is no formal install spec in the registry; the SKILL.md tells users to run `npm install -g @membranehq/cli@latest` (and suggests `npx` elsewhere). Relying on the npm 'latest' tag and suggesting a global install is a moderate operational risk (supply-chain / version drift) but is proportionate to using a CLI. Recommend preferring pinned versions or `npx` to avoid global installs.
Credentials
The skill requests no environment variables or local config paths, and explicitly advises not to ask users for API keys (Membrane handles auth). The lack of extraneous credential requests is appropriate for a connector that uses an external platform for auth.
Persistence & Privilege
always is false and the skill does not request any elevated or persistent platform privileges. Autonomous invocation is allowed (platform default) but not combined with broad access or always:true, so no additional concern.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sugarsync - 安装完成后，直接呼叫该 Skill 的名称或使用
/sugarsync触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Sugarsync 是什么？
SugarSync integration. Manage data, records, and automate workflows. Use when the user wants to interact with SugarSync data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 109 次。
如何安装 Sugarsync？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sugarsync」即可一键安装，无需额外配置。
Sugarsync 是免费的吗？
是的，Sugarsync 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sugarsync 支持哪些平台？
Sugarsync 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sugarsync？
由 Vlad Ursul（@gora050）开发并维护，当前版本 v1.0.1。
推荐 Skills