Chatsonic
v1.0.2Chatsonic integration. Manage Users, Chats, Images, Workspaces, Prompts. Use when the user wants to interact with Chatsonic data.
⭐ 0· 203·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description describe Chatsonic integration and every required action in SKILL.md is about using the Membrane CLI to connect and operate on Chatsonic connectors. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
Runtime instructions are explicit: install @membranehq/cli, run membrane login, create/connect to a Chatsonic connector, list/run actions, or proxy requests via membrane request. The instructions do not ask the agent to read unrelated files or environment variables, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
The SKILL.md instructs installing the Membrane CLI via npm (npm install -g @membranehq/cli). This is a normal distribution method but does require global npm installation privileges and trust in the @membranehq package and its registry publishing account. The skill itself has no automatic install spec in the registry (instruction-only).
Credentials
The skill declares no required environment variables or local credentials and explicitly advises not to ask users for API keys. However, it depends on a Membrane account and the Membrane service will hold and use credentials for Chatsonic on the user's behalf; trusting Membrane's handling of those secrets is required.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and has no install-time components written by the registry. It does not request persistent privileges or modify other skills or system-wide configuration.
Scan Findings in Context
[no_regex_findings] expected: No code files were present; the scanner had nothing to analyze. This is expected for an instruction-only SKILL.md. Evaluate security based on the instructions and external service trust instead.
Assessment
This skill is coherent but depends on the third-party Membrane service. Before using it: 1) Verify you trust Membrane (review the @membranehq/cli package on the npm registry and the company/site), because Membrane will hold Chatsonic credentials and proxy requests. 2) Installing the CLI globally requires npm permissions—install it deliberately and review what the package does if concerned. 3) Do not provide Chatsonic/API keys directly to the agent; follow the SKILL.md workflow to create a connection via Membrane. 4) If you require stricter privacy, confirm Membrane's data handling and retention policies or consider using a direct Chatsonic integration that you control.Like a lobster shell, security has layers — review code before you run it.
latestvk972yc6c34wczyfekgnqcgcdys843b6s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.