← 返回 Skills 市场
Vtex
作者
Vlad Ursul
· GitHub ↗
· v1.0.1
· MIT-0
131
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install vtex
功能描述
VTEX integration. Manage data, records, and automate workflows. Use when the user wants to interact with VTEX data.
安全使用建议
This skill appears to do what it says: it uses the Membrane CLI to connect your agent to VTEX. Before installing or using it, confirm you trust the Membrane service (homepage and GitHub repo), because authenticating will grant Membrane access to your VTEX data. You will need npm/node locally to install the CLI—verify that requirement is acceptable. Prefer using the documented connection flow (which keeps API keys server-side) and avoid pasting raw credentials into chat. If you want extra assurance, inspect the @membranehq/cli package source on the referenced GitHub repo and confirm the package name/version matches the SKILL.md instructions.
功能分析
Type: OpenClaw Skill
Name: vtex
Version: 1.0.1
The vtex skill bundle provides instructions for an AI agent to manage VTEX e-commerce data using the Membrane CLI. It contains high-risk instructions in SKILL.md, specifically requiring the agent to install a global npm package (@membranehq/cli) and execute actions through a third-party platform (getmembrane.com), including the ability to dynamically create and run new actions (RCE-as-a-service). While these behaviors are aligned with the stated purpose of the skill and the Membrane platform's architecture, they represent significant attack surfaces—global system modification and remote code execution via a third party—without evidence of direct malicious intent.
能力评估
Purpose & Capability
Name/description claim VTEX integration and the SKILL.md consistently instructs using Membrane to connect to VTEX. However, the skill metadata declares no required binaries while the instructions ask the user to install the Membrane CLI via npm (so npm/node is implicitly required). This is a minor metadata inconsistency but not a functional mismatch.
Instruction Scope
Runtime instructions stay within the stated purpose: install and use the Membrane CLI to authenticate, create a VTEX connection, discover and run actions. The doc explicitly advises against asking users for raw API keys and does not instruct reading unrelated files or credentials.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md recommends installing @membranehq/cli via npm (global install and npx usage). Installing an npm package is a normal approach for a CLI but carries the usual supply-chain risk of third-party npm packages; the registry metadata should have indicated that npm (or node) is required.
Credentials
No environment variables, secrets, or config paths are requested by the skill. The doc states Membrane handles auth server-side and instructs creating a connection rather than supplying API keys locally, which is proportionate for this integration.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It does rely on the Membrane service and CLI but does not attempt to modify other skills or global agent configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install vtex - 安装完成后，直接呼叫该 Skill 的名称或使用
/vtex触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Vtex 是什么？
VTEX integration. Manage data, records, and automate workflows. Use when the user wants to interact with VTEX data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 131 次。
如何安装 Vtex？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install vtex」即可一键安装，无需额外配置。
Vtex 是免费的吗？
是的，Vtex 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Vtex 支持哪些平台？
Vtex 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Vtex？
由 Vlad Ursul（@gora050）开发并维护，当前版本 v1.0.1。
推荐 Skills