Clickmeter
v1.0.0ClickMeter integration. Manage data, records, and automate workflows. Use when the user wants to interact with ClickMeter data.
⭐ 0· 31·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim ClickMeter integration and the SKILL.md exclusively documents using the Membrane CLI to connect to and proxy ClickMeter API calls. No unrelated credentials, binaries, or system access are requested.
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI, logging in, creating a connection, listing/running actions, and proxying ClickMeter requests. The instructions do not direct the agent to read local files, environment variables, or other system state outside of normal CLI use.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md recommends npm install -g @membranehq/cli and also shows npx usage. Global npm installs modify the user's system PATH; prefer npx or review the published package and source before global installation.
Credentials
No environment variables, secrets, or unrelated credentials are requested. The document explicitly instructs to let Membrane handle auth server-side (no local API keys required), which is proportionate for a connector-style integration.
Persistence & Privilege
always is false and there is no install-time persistence or modification of other skills/settings. The skill can be invoked autonomously by the agent (disable-model-invocation is false), which is the platform default and not by itself a red flag.
Assessment
This skill appears coherent with its stated purpose, but before installing: 1) Verify the Membrane CLI package (@membranehq/cli) and its source (npm page and the GitHub repository) to ensure you’re installing the official tool. 2) Prefer ephemeral invocation (npx) over a global npm -g install unless you trust the package. 3) Understand that Membrane will hold and manage ClickMeter credentials server-side and will be able to perform API calls on your behalf — only create connections you intend to allow, and revoke them if suspicious. 4) If you allow the agent to invoke skills autonomously, be aware it could run Membrane commands using any connection you create; limit agent permissions or require human confirmation for sensitive operations.Like a lobster shell, security has layers — review code before you run it.
latestvk977rc55n37gpwqdbhyt4bemmn847khg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.