← 返回 Skills 市场
Tiendanube
作者
Vlad Ursul
· GitHub ↗
· v1.0.0
· MIT-0
80
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tiendanube
功能描述
Tiendanube (Nuvemshop) integration. Manage Recordses. Use when the user wants to interact with Tiendanube (Nuvemshop) data.
安全使用建议
This skill appears to be a wrapper around the Membrane CLI to manage Tiendanube (Nuvemshop) data and does not itself contain code, but there are a few things to check before installing:
- Metadata mismatch: The skill metadata lists no required binaries or credentials, yet the instructions require Node/npm (or npx) and a valid Membrane account. Expect to need Node/npm and to authenticate to Membrane.
- CLI install: The SKILL.md recommends npm install -g @membranehq/cli. Prefer running it with npx (npx @membranehq/cli ...) if you want to avoid a global install, or inspect the package on the npm registry/GitHub first.
- Third-party service: Using this skill routes your Tiendanube access through Membrane’s service. Verify you trust Membrane (privacy, data handling, and account permissions) before connecting production data.
- Source unknown: Registry lists Source: unknown and homepage getmembrane.com; verify the package/repository links (e.g., GitHub repo) and confirm the publisher before granting access.
If you want this skill, ask the publisher to update metadata to declare required binaries (node/npm), that a Membrane account is required, and to supply authoritative repository links. If you cannot verify Membrane or the npm package publisher, do not install the CLI or connect production accounts.
功能分析
Type: OpenClaw Skill
Name: tiendanube
Version: 1.0.0
The skill is a standard integration for Tiendanube (Nuvemshop) using the Membrane CLI. The instructions in SKILL.md guide the agent to install the legitimate '@membranehq/cli' package and use it for authentication and data management. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection; the skill actually promotes security best practices by advising the agent to let the platform handle credentials rather than requesting API keys from the user.
能力评估
Purpose & Capability
The SKILL.md describes exactly the intended capability (manage Tiendanube records) and delegates work to the Membrane CLI, which is coherent with the skill name/description. However, the registry metadata lists no required binaries or credentials while the instructions require a Membrane account and npm/node for installing the CLI — a mismatch between declared requirements and runtime instructions.
Instruction Scope
The runtime instructions are narrowly scoped to installing/using the Membrane CLI, creating connections, discovering and running actions, and performing auth via Membrane. They do not instruct reading arbitrary local files or exporting unrelated system credentials. Headless login requires a user to copy a code from a browser, which is expected for OAuth-like flows.
Install Mechanism
There is no install spec in the registry (instruction-only), but SKILL.md tells the user to run npm install -g @membranehq/cli or use npx. Installing a global npm package is common but does require write access and a trusted package source. The instructions reference the official @membranehq/cli package (a scoped npm name), which is better than a random URL, but the registry metadata did not declare Node/npm as a required binary.
Credentials
The skill metadata declares no required env vars or primary credential, yet SKILL.md states a valid Membrane account is required and instructs the user to run membrane login. That account/credential requirement should be declared. The SKILL.md explicitly says not to ask users for direct API keys (good), but the omission in metadata increases risk of user confusion and accidental credential exposure.
Persistence & Privilege
The skill is not always-on, does not request elevated platform privileges, and is instruction-only (no code files). It does ask the user to install a CLI which adds software to the system, but the skill itself does not request persistent access to other skills' configs or system files.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install tiendanube - 安装完成后,直接呼叫该 Skill 的名称或使用
/tiendanube触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Tiendanube 是什么?
Tiendanube (Nuvemshop) integration. Manage Recordses. Use when the user wants to interact with Tiendanube (Nuvemshop) data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 80 次。
如何安装 Tiendanube?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tiendanube」即可一键安装,无需额外配置。
Tiendanube 是免费的吗?
是的,Tiendanube 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Tiendanube 支持哪些平台?
Tiendanube 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Tiendanube?
由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.0。
推荐 Skills