Cleeng
v1.0.0Cleeng integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cleeng data.
⭐ 0· 29·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Cleeng integration) matches the SKILL.md: it documents using the Membrane CLI to connect to Cleeng, discover actions, run them, and proxy API calls. Required capabilities (network access, Membrane account, Membrane CLI) are appropriate for the stated purpose.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, performing login/connection flows, listing and running actions, and proxying requests to the Cleeng API. There are no instructions to read unrelated files, access unrelated env vars, or exfiltrate data. Headless and browser-based auth flows are described and scoped to creating a connection to Cleeng.
Install Mechanism
The skill is instruction-only (no install spec), but it tells users to run `npm install -g @membranehq/cli`. Installing a global npm CLI is a common approach but carries the usual npm risks (you must trust the package publisher and repository). This is proportionate to the task but worth the usual caution.
Credentials
The skill declares no required environment variables or credentials and explicitly instructs to let Membrane handle auth rather than collecting API keys locally. That is consistent; the main consideration is trusting Membrane (a third party) with Cleeng credentials and proxied requests.
Persistence & Privilege
The skill is not always-on, requests no system-wide configuration changes, and contains no code that would persist or escalate privileges. It's instruction-only and does not modify other skills or agent settings.
Scan Findings in Context
[no_regex_findings] expected: The regex-based scanner had nothing to analyze because this is an instruction-only skill with no code files. This absence of findings is expected and not evidence of risk-free behavior — the SKILL.md is the primary surface to review.
Assessment
This skill appears internally coherent, but before installing or using it you should: (1) confirm you trust the Membrane service and the @membranehq/cli package (verify the npm package and the GitHub repository/maintainer), since Membrane will proxy requests and hold Cleeng credentials; (2) be aware `npm install -g` requires elevated rights on some systems—use a secure environment or prefer non-global install if you prefer; (3) review the connection scopes granted during the browser auth flow and remove connections when no longer needed; and (4) check the Cleeng and Membrane docs/privacy policy if you need to limit third-party access to subscriber/payment data.Like a lobster shell, security has layers — review code before you run it.
latestvk974xzmsq7fhky16x5b5gn8tb18473e2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.