Channeladvisor
v1.0.2ChannelAdvisor integration. Manage data, records, and automate workflows. Use when the user wants to interact with ChannelAdvisor data.
⭐ 0· 114·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description describe a ChannelAdvisor integration and the SKILL.md consistently instructs the agent to use the Membrane CLI to connect to ChannelAdvisor and run actions; requested capabilities (none) align with using a hosted integration platform rather than direct credential handling.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, creating connections, listing actions, running actions, and optionally proxying requests to ChannelAdvisor via Membrane. The instructions do not ask the agent to read unrelated files, environment variables, or system paths, nor to send data to unexpected endpoints outside of Membrane/ChannelAdvisor.
Install Mechanism
There is no packaged install spec in the registry, but SKILL.md instructs the user to install @membranehq/cli via npm (npm install -g). Installing a global npm package is a typical way to obtain a CLI but carries the usual moderate risk of executing third-party code on the host; this is expected for a CLI-driven integration.
Credentials
The skill declares no required environment variables or credentials. Authentication is handled interactively through membrane login (browser) and through Membrane-managed connections. The credential access described is proportionate to the integration purpose.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request persistent system-level privileges or modify other skills. There are no instructions to change global agent configurations beyond using the Membrane CLI.
Assessment
This skill is instruction-only and coherent: it expects you to install and use the Membrane CLI to manage ChannelAdvisor via Membrane-managed connections. Before installing, verify the @membranehq/cli package is the official package (check the npm page, GitHub repo, and publisher), and prefer installing in a controlled environment (not on a high-value production host) if you have concerns. During membrane login, review the scopes/permissions you grant; be cautious when using the proxy feature to call arbitrary endpoints and avoid sending sensitive secrets unless you trust Membrane and ChannelAdvisor access is strictly scoped. If you need additional assurance, ask the publisher for a signed release or an install spec in the registry rather than relying solely on SKILL.md instructions.Like a lobster shell, security has layers — review code before you run it.
latestvk9707j1r4ex0h9bvjjbmzb5ad1843eae
License
MIT-0
Free to use, modify, and redistribute. No attribution required.