Chatwoot
v1.0.2Chatwoot integration. Manage data, records, and automate workflows. Use when the user wants to interact with Chatwoot data.
⭐ 0· 70·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Chatwoot integration) matches the instructions: all runtime steps use the Membrane CLI to discover connections, run actions, and proxy requests to Chatwoot. Nothing in the SKILL.md asks for unrelated services or credentials.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, running its discovery/connect/request commands, and performing browser-based login flows. Note: the workflow routes Chatwoot API calls through Membrane (a third-party proxy), so user data and Chatwoot access are granted to Membrane as part of the login/connect steps — this is expected but important for user consent and privacy.
Install Mechanism
No install spec is embedded in the skill bundle; the SKILL.md instructs users to run `npm install -g @membranehq/cli`. Installing a public npm CLI is a standard but higher-impact step than a purely read-only instruction; verify the npm package and author (@membranehq) before installing globally.
Credentials
The skill declares no environment variables or secrets. Authentication is performed interactively via the Membrane login flow (browser-based), which is proportionate to its purpose. There are no unexplained requests for other credentials or system config.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request special platform privileges. It does rely on the Membrane service to store/manage credentials (server-side) after login, which is expected behavior for a CLI that manages connectors.
Assessment
This skill is coherent: it uses the Membrane CLI as a gateway to Chatwoot rather than calling Chatwoot directly. Before installing/using it, confirm you trust Membrane (https://getmembrane.com and the @membranehq npm package and GitHub repo) because the login/connect flow will grant Membrane access to your Chatwoot account. Installing the CLI globally requires npm privileges — check the package integrity and maintainers. If you prefer direct integration, consider connecting to Chatwoot yourself rather than routing through a third-party proxy. Otherwise the skill's behavior appears proportionate to its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk977xze45w14re6hgnevtvrpnh8423hy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.