← 返回 Skills 市场
gora050

Timewax

作者 Vlad Ursul · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
157
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install timewax
功能描述
Timewax integration. Manage data, records, and automate workflows. Use when the user wants to interact with Timewax data.
安全使用建议
Before installing or using this skill: (1) verify you trust @membranehq and inspect the Membrane CLI package and its source (the SKILL.md references a GitHub repo and getmembrane.com) — check the npm package name and repository to ensure it matches; (2) understand that the skill requires a Membrane account/login (not declared in registry metadata) and may require Timewax credentials — confirm what credentials will be stored and where; (3) be aware that the install command is a global npm install (third-party code executed on your machine) — prefer to install in an isolated environment or container if possible; (4) ask the publisher to clarify which environment variables or API keys are required and how credentials are handled; (5) if you want the agent to run membrane commands automatically, require explicit user consent each time — otherwise restrict autonomous runs. If you cannot verify the Membrane CLI source or do not want to install third-party global packages, do not install or run this skill.
功能分析
Type: OpenClaw Skill Name: timewax Version: 1.0.3 The 'timewax' skill is a standard integration for the Timewax resource planning platform using the Membrane CLI. The SKILL.md file provides instructions for the agent to install the '@membranehq/cli' npm package, authenticate via OAuth-style flows, and manage Timewax data through Membrane's action-based system. No evidence of data exfiltration, malicious execution, or prompt injection was found; the behavior is entirely consistent with the stated purpose of the integration.
能力标签
cryptocan-make-purchasesrequires-sensitive-credentials
能力评估
Purpose & Capability
The skill's stated purpose (Timewax integration) matches the instructions: it delegates access to Timewax via the Membrane CLI. However, the skill metadata does not declare the Membrane account/credentials that the SKILL.md explicitly requires, which is an inconsistency (expected: a declared primary credential or required env vars for authentication).
Instruction Scope
SKILL.md stays on-topic: it instructs installing the Membrane CLI, running 'membrane login' (interactive or headless), and using the CLI to access Timewax resources. The instructions do not ask the agent to read unrelated files, system paths, or extraneous environment variables. They do require network access and interactive steps (browser or manual code completion).
Install Mechanism
The install guidance is to run 'npm install -g @membranehq/cli@latest' — an npm package from the public registry. This is a common approach but does entail executing third-party code and making a global change to the system PATH. The skill has no install spec in the registry itself, so installation is user-driven rather than automatic.
Credentials
The SKILL.md requires a Membrane account and uses a login flow, but the registry metadata lists no required environment variables or primary credential. It is unclear whether additional credentials (Timewax API keys or service credentials) are needed or will be stored by Membrane. The lack of declared credentials is a proportion and transparency issue: users should know exactly which secrets/credentials will be used or stored.
Persistence & Privilege
The skill does not request permanent presence (always:false), has no install-time persistence specified, and is instruction-only. Autonomous invocation is allowed by default but is normal; the skill does not claim elevated privileges or modify other skills.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install timewax
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /timewax 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
元数据
Slug timewax
版本 1.0.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Timewax 是什么?

Timewax integration. Manage data, records, and automate workflows. Use when the user wants to interact with Timewax data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 157 次。

如何安装 Timewax?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install timewax」即可一键安装,无需额外配置。

Timewax 是免费的吗?

是的,Timewax 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Timewax 支持哪些平台?

Timewax 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Timewax?

由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.3。

💬 留言讨论