Better Proposals
v1.0.2Better Proposals integration. Manage data, records, and automate workflows. Use when the user wants to interact with Better Proposals data.
⭐ 0· 117·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the instructions: the SKILL.md documents using the Membrane CLI to access Better Proposals. Required capabilities (network access, a Membrane account, installing the CLI) are consistent with the stated purpose.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI (login, create connections, list/run actions, and proxy requests). The 'proxy requests' feature allows arbitrary proxied API calls to Better Proposals through Membrane — this is expected for an integration but means the CLI can send arbitrary requests to the external API on your behalf.
Install Mechanism
The skill is instruction-only and asks you to install @membranehq/cli via npm -g. This is a common but non-trivial install mechanism: npm packages run unreviewed code on install and placing a binary globally affects the system PATH. The source is the public npm registry (expected) but you should verify the package and its maintainers.
Credentials
No environment variables, credentials, or config paths are requested by the skill itself. Authentication is delegated to the Membrane login flow, which is proportionate to the task of accessing Better Proposals.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It relies on a user-performed Membrane login flow; autonomous invocation by the agent is possible (platform default) but not enabled as forced presence.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to talk to Better Proposals — that is coherent. Before installing: (1) verify you trust the @membranehq/cli npm package and its maintainers (global npm installs run code on your machine); (2) understand that Membrane will hold/refresh credentials for Better Proposals and can proxy arbitrary API requests on your behalf, so review Membrane account permissions and privacy policy; (3) prefer installing in a controlled environment (or inspect the package) if you have strict security policies; and (4) be aware the agent can call this skill autonomously (standard behavior) so only enable it for agents you trust.Like a lobster shell, security has layers — review code before you run it.
latestvk973cks5bgaxxjq1wzjz3jfd6d843gt4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.