Action Network
v1.0.2Action Network integration. Manage data, records, and automate workflows. Use when the user wants to interact with Action Network data.
⭐ 0· 154·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Action Network integration) matches the instructions (use Membrane CLI to connect, run actions, or proxy requests). Nothing requested (no env vars, no config paths) is unrelated to that purpose.
Instruction Scope
SKILL.md limits the agent to installing and using the Membrane CLI, logging in via browser, creating connections, listing/running actions, and proxying API requests. It does not instruct reading unrelated filesystem paths or environment variables, nor does it introduce data exfiltration destinations beyond the expected Membrane proxy/Action Network API.
Install Mechanism
No install spec in the skill bundle (instruction-only). The doc recommends installing @membranehq/cli via `npm install -g`, which is a common but higher-trust action than 'no install' because it fetches and runs code from the npm registry. This is expected for a CLI-based integration but carries the usual supply-chain/install risks.
Credentials
The skill declares no required environment variables or credentials and explicitly delegates auth to Membrane. That is proportionate to the described functionality, though it does mean trusting Membrane with Action Network credentials.
Persistence & Privilege
The skill is not always-enabled and makes no requests to modify other skills or system-wide configs. It contains only runtime instructions and does not request persistent elevated privileges.
Assessment
This skill is coherent and uses the Membrane CLI to access Action Network, so your primary trust decision is whether you trust Membrane (getmembrane.com/@membranehq on npm/GitHub). Before installing: verify the CLI package and its publisher on npm and the linked GitHub repo, prefer installing in an isolated environment if you're cautious, and avoid installing global packages on sensitive hosts. Understand that Membrane will mediate and hold credentials for Action Network — if you later want to revoke access, remove the connection in your Membrane account and uninstall the CLI. If you need lower trust, consider manually using Action Network's official API with credentials you control instead of using a third-party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk975nvsxw4ds6zkj5fmvejg9rn842rdg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.