ClawHub

Cj Affiliate

v1.0.0

CJ Affiliate integration. Manage data, records, and automate workflows. Use when the user wants to interact with CJ Affiliate data.

⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description say 'CJ Affiliate integration' and the SKILL.md consistently instructs usage of the Membrane CLI to connect, run actions, and proxy requests to CJ Affiliate. Required capabilities (network access, Membrane account, Membrane CLI) match the stated purpose; no unrelated credentials or binaries are requested.
✓
Instruction Scope
All runtime instructions focus on installing/using the Membrane CLI, logging in, creating a CJ Affiliate connection, listing actions, running actions, and proxying requests. The doc explicitly advises not to ask users for API keys and uses browser-based login/connector flows. It does not instruct reading unrelated files, environment variables, or exfiltrating data.
ℹ
Install Mechanism
The skill is instruction-only (no install spec), but the SKILL.md tells users to run `npm install -g @membranehq/cli`. This is reasonable for the described workflow, but installing a global npm package grants code execution on the host — users should confirm the package's provenance (npm and GitHub links are provided).
✓
Credentials
No environment variables or credentials are required by the skill itself. The SKILL.md relies on Membrane to manage CJ credentials server-side, which is proportional to the integration's needs. The only external requirement is a Membrane account and network access.
✓
Persistence & Privilege
The skill does not request persistent presence (always:false) and is instruction-only. It does not ask to modify other skills or system-wide agent settings. Autonomous invocation remains allowed by platform default but is not combined with other privilege red flags.
Assessment
This skill appears coherent: it guides you to install and use the official Membrane CLI to connect to CJ Affiliate and explicitly avoids asking for direct API keys. Before installing, verify the @membranehq/cli package and the listed GitHub repo on npmjs.com/GitHub to confirm authenticity. Be aware that installing a global npm package runs code with your user privileges — review package metadata and maintainers. Confirm you are comfortable granting network access and using a Membrane account (check their privacy/security policies) and follow the headless login steps if you run this in CI or a server environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk9788zf4g41fm4vx2jdtpkjbbs84hgs6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments