← 返回 Skills 市场
Thrivecart
作者
Membrane Dev
· GitHub ↗
· v1.0.3
· MIT-0
143
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install thrivecart
功能描述
Thrivecart integration. Manage data, records, and automate workflows. Use when the user wants to interact with Thrivecart data.
安全使用建议
This skill appears to do what it claims: it uses the Membrane service/CLI to interact with Thrivecart. Before installing or running anything: (1) verify the Membrane project and @membranehq/cli package (publisher, GitHub repo, npm page) to ensure you're comfortable installing it; (2) prefer using npx for one-off runs instead of global npm install; (3) be aware that authenticating via Membrane gives that third party access to the connected Thrivecart account — confirm you trust the service and review what data/actions will be permitted; (4) if you need a stricter security posture, request an explicit registry install spec or a vetted binary/source before proceeding.
功能分析
Type: OpenClaw Skill
Name: thrivecart
Version: 1.0.3
The skill requires the agent to install a global NPM package (@membranehq/cli) and interact with a third-party service (getmembrane.com) to manage authentication and execute actions. A significant risk is identified in the 'action create' functionality, where the agent is instructed to let a remote service dynamically build and execute logic based on natural language descriptions. While these capabilities are aligned with the stated purpose of the Membrane platform, the requirement for global shell execution and reliance on remotely-orchestrated logic represents a high-privilege attack surface. File: SKILL.md.
能力标签
能力评估
Purpose & Capability
Name/description (Thrivecart integration) match the instructions: the skill consistently uses Membrane to connect to Thrivecart and manage actions. Required artifacts (network access, Membrane account) are appropriate for this purpose.
Instruction Scope
SKILL.md stays on topic: it tells the agent how to install/use the Membrane CLI, authenticate, create a connection, discover and run actions, and create actions if needed. It does not instruct reading unrelated files, harvesting env vars, or exfiltrating data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), but the README tells users to run npm install -g @membranehq/cli or use npx. Installing a third‑party npm CLI executes code from the npm registry — a standard but non-zero risk; prefer npx or verify the package and its publisher before installing globally.
Credentials
The skill declares no required env vars or local credentials and explicitly delegates auth to Membrane (login flow). It does not request unrelated secrets or broad environment access.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide agent settings. Installing the CLI (optional) would add a tool to your environment, but the skill itself has no elevated persistence requirements.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install thrivecart - 安装完成后，直接呼叫该 Skill 的名称或使用
/thrivecart触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Thrivecart 是什么？
Thrivecart integration. Manage data, records, and automate workflows. Use when the user wants to interact with Thrivecart data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 143 次。
如何安装 Thrivecart？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install thrivecart」即可一键安装，无需额外配置。
Thrivecart 是免费的吗？
是的，Thrivecart 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Thrivecart 支持哪些平台？
Thrivecart 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Thrivecart？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.3。
推荐 Skills