Cherwell Itsm
v1.0.0Cherwell ITSM integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cherwell ITSM data.
⭐ 0· 29·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Cherwell ITSM integration) align with the runtime instructions: the SKILL.md consistently instructs the agent to use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to Cherwell. No unrelated services, environment variables, or binaries are requested.
Instruction Scope
Instructions are narrowly scoped to installing/using the Membrane CLI, authenticating via Membrane (browser or headless flow), listing/connecting to Cherwell connectors, running actions, and proxying requests. The SKILL.md does not instruct the agent to read arbitrary files, harvest environment variables, or send data to endpoints outside the Membrane proxy workflow.
Install Mechanism
This is an instruction-only skill (no install spec). It tells users to install the Membrane CLI via `npm install -g @membranehq/cli` or use `npx`. That is expected for a CLI-driven integration, but it does require installing a global npm package (writes to disk/system PATH). Because installation happens via user-run commands rather than an automatic install spec, recommend verifying the package identity on npm/GitHub and prefer `npx` or isolated environments if you want to avoid a global install.
Credentials
The skill declares no required environment variables or credentials. It relies on a Membrane account and browser-based authentication to create connections to Cherwell, which is proportional for a connector-based integration—Membrane handles auth server-side and SKILL.md explicitly advises against asking users for API keys.
Persistence & Privilege
Skill is not marked always:true and requests no system or agent-wide persistent configuration. It's user-invocable and can be invoked autonomously (platform default), which is normal for skills; there is no request to modify other skills or global config.
Assessment
This skill appears coherent: it uses the Membrane CLI and a Membrane account to access Cherwell data rather than asking for raw API keys. Before installing or running it, verify you trust Membrane/@membranehq (check the npm package owner and the GitHub repository), prefer using `npx` or an isolated environment to avoid a global npm installation, and review the permissions/consent screen when you connect Cherwell to Membrane. Do not paste Cherwell API keys or internal secrets into chat; let the official connection flow handle authentication.Like a lobster shell, security has layers — review code before you run it.
latestvk973mm4nrrbsyhaw9e7jjqyah9846v8r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
