Campaignhq
v1.0.2CampaignHQ integration. Manage data, records, and automate workflows. Use when the user wants to interact with CampaignHQ data.
⭐ 0· 113·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes integrating CampaignHQ via the Membrane CLI and its instructions exclusively reference Membrane commands and CampaignHQ actions. No unrelated credentials, binaries, or system access are requested.
Instruction Scope
SKILL.md commands are limited to installing/using the Membrane CLI, logging in (browser OAuth flow), listing/connecting actions, running actions, and proxying API requests through Membrane. It does not instruct reading local files or unrelated environment variables or sending data to unexpected endpoints.
Install Mechanism
No install spec in skill bundle; instructions recommend installing @membranehq/cli via npm (global). This is expected for a CLI-driven integration but installing global npm packages runs third-party code — a moderate supply-chain consideration that is proportionate to the stated purpose.
Credentials
The skill declares no required environment variables or credentials. Authentication is delegated to the Membrane CLI (interactive/browser flow), which is appropriate for this integration.
Persistence & Privilege
Flags show default behavior (not always-included, agent-invocable). The skill does not request persistent system-wide privileges or attempt to modify other skills or system configs.
Scan Findings in Context
[no_regex_findings] expected: The static regex scanner had nothing to analyze because this is an instruction-only skill with no code files. That absence is consistent with the skill's nature.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to interact with CampaignHQ. Before installing, verify you trust the @membranehq/cli npm package (review its npm page and source repo), and be comfortable running an interactive login (browser OAuth) which grants Membrane access to CampaignHQ on your behalf. For sensitive campaign data, consider using a dedicated account/least-privilege credentials and review Membrane's security/privacy docs. Installing a global npm package has general supply-chain risks—if you need higher assurance, inspect the CLI source before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk972vd3dtne5f6q9ydm3txg3qs8438dt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.