← 返回 Skills 市场
Yugabyte
作者
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
168
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install yugabyte
功能描述
Yugabyte integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yugabyte data.
安全使用建议
Before installing or using this skill: (1) Understand that SKILL.md instructs you to install the Membrane CLI via `npm install -g`, which will download and install code from the npm registry and place binaries on your system — ensure you trust @membranehq and verify package provenance. (2) The registry metadata omits required binaries (Node/npm) and the install step; plan for Node/npm availability or use `npx` to avoid a global install. (3) The skill uses browser-based auth (or a code you must paste back); don't paste secrets into chat — follow the documented login flow. (4) If you need stronger assurance, ask the publisher for an explicit install spec (or a link to the exact npm package release), and verify the repository/homepage match the package on npm. (5) Because this is instruction-only (no code shipped in the skill itself), the largest runtime risk is the CLI you install — review that project separately before installing.
功能分析
Type: OpenClaw Skill
Name: yugabyte
Version: 1.0.1
The skill provides instructions for an AI agent to manage YugabyteDB instances using the Membrane CLI (@membranehq/cli). The instructions cover standard CLI operations including installation, authentication, and action execution via the Membrane platform. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the skill actually encourages secure credential management by offloading authentication to the Membrane service.
能力评估
Purpose & Capability
The SKILL.md describes interacting with Yugabyte via the Membrane platform, which fits the skill name and description. However, the skill metadata lists no required binaries or install steps while the runtime instructions explicitly require npm/node (for npm install -g and npx). That mismatch (not declaring Node/npm) is an incoherence: a user installing this skill would need Node/npm but the registry doesn't advertise that requirement.
Instruction Scope
Instructions stay on-purpose: they direct the agent/user to install the Membrane CLI, log in via Membrane, create a connection for the Yugabyte connector, discover or create actions, and run them. The instructions do not ask the agent to read unrelated files, export environment secrets, or call unexpected external endpoints beyond Membrane. Authentication flow is browser-based or code-based (user-involved).
Install Mechanism
There is no formal install spec in the registry, but SKILL.md tells users to run `npm install -g @membranehq/cli@latest` (and suggests npx in other examples). That means arbitrary code will be downloaded from npm and installed globally. While @membranehq appears to be the intended publisher, a global npm install changes system state and has a higher trust/risk profile than an instruction-only skill that requires no installs. The registry should have declared this dependency and made provenance explicit.
Credentials
The skill does not request environment variables, credentials, or system config paths in metadata. The SKILL.md explicitly delegates credential management to Membrane and advises against asking users for API keys. The requirement for a Membrane account and network access is proportionate to the stated purpose.
Persistence & Privilege
The skill itself does not request 'always' nor system privileges, but following its instructions results in a global npm package installation that places binaries on PATH (persistence on the host). This side-effect is not declared in metadata and requires user consent; it's not inherently malicious but is an elevation of footprint compared to a truly instruction-only skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install yugabyte - 安装完成后，直接呼叫该 Skill 的名称或使用
/yugabyte触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Yugabyte 是什么？
Yugabyte integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yugabyte data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 168 次。
如何安装 Yugabyte？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yugabyte」即可一键安装，无需额外配置。
Yugabyte 是免费的吗？
是的，Yugabyte 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Yugabyte 支持哪些平台？
Yugabyte 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Yugabyte？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.1。
推荐 Skills