← 返回 Skills 市场
Tookan
作者
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
102
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install tookan
功能描述
Tookan integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tookan data.
安全使用建议
This skill could be legitimate but has an unclear authentication model. Before installing or enabling it: 1) Ask the publisher how Tookan authentication is handled — do you provide Tookan API keys directly, or are your credentials routed/stored by Membrane? 2) Verify the privacy and data-handling policy of the Membrane service (where data may be proxied). 3) If possible, inspect the full SKILL.md to confirm which external endpoints the skill uses and whether it ever asks the agent to read local files or env vars. 4) Prefer using an official Tookan integration or a skill that explicitly declares required credentials and their storage. If you must proceed, test with a non-production Tookan account and monitor outgoing network requests.
功能分析
Type: OpenClaw Skill
Name: tookan
Version: 1.0.1
The skill instructs the agent to perform high-risk operations, including the global installation of an external NPM package (@membranehq/cli) and routing all data through a third-party service (getmembrane.com) instead of interacting with the Tookan API directly. While presented as a convenience for authentication, this architecture introduces a significant supply chain dependency and potential data exposure. Additionally, SKILL.md contains an extremely long, repetitive list of 'Task Question' fields that serves no clear functional purpose and could be used for context-window bloating or to obscure other instructions.
能力标签
能力评估
Purpose & Capability
The skill's stated purpose is a Tookan integration, which normally requires Tookan API credentials. The registry entry lists no required env vars or primary credential; instead the SKILL.md only says it 'Requires network access and a valid Membrane account.' It's unclear how Tookan authentication is performed (direct Tookan API keys vs. delegated via Membrane). This gap between purpose and declared requirements is unexpected.
Instruction Scope
The skill is instruction-only (SKILL.md) and requires network access via the Membrane service. No code files exist for static review. From the provided excerpt the doc enumerates many Tookan entities (tasks, agents, webhooks, etc.) but does not show explicit runtime commands or file access. Because the SKILL.md is the operative runtime instruction set, the absence of explicit authentication steps or a clear description of which endpoints receive data means the agent could send Tookan data through Membrane or other endpoints — this should be clarified before use.
Install Mechanism
No install spec and no code files — lowest-risk in terms of local install/write operations. Nothing is downloaded or executed on the host by the skill itself.
Credentials
No environment variables or credentials are declared, yet a Tookan integration normally needs credentials (API key/secret). The SKILL.md's reliance on a 'valid Membrane account' suggests authentication/credential management is delegated to an external service; requiring a third-party account without declaring what secrets are used or how they are stored is disproportionate and worth scrutiny (users should know whether their Tookan data/credentials will be handled by Membrane).
Persistence & Privilege
The skill is not always-included and does not request elevated persistence. Autonomous invocation is enabled by default but that is the platform default and not by itself a red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tookan - 安装完成后，直接呼叫该 Skill 的名称或使用
/tookan触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Tookan 是什么？
Tookan integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tookan data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 102 次。
如何安装 Tookan？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tookan」即可一键安装，无需额外配置。
Tookan 是免费的吗？
是的，Tookan 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Tookan 支持哪些平台？
Tookan 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tookan？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.1。
推荐 Skills