Clientify
v1.0.2Clientify integration. Manage data, records, and automate workflows. Use when the user wants to interact with Clientify data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Clientify integration and its instructions only cover installing and using the Membrane CLI to connect to Clientify, list/run actions, and proxy API requests. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md stays within the expected scope: it instructs installing Membrane CLI, logging in, creating connections, running actions, and proxying requests to Clientify. One point to be aware of: the 'membrane request' proxy allows arbitrary requests to the Clientify API (and thus can retrieve or modify any data the connected account can access). This is consistent with the skill's purpose but is a powerful capability that users should treat as equivalent to granting the tool access to their Clientify account.
Install Mechanism
No install spec baked into the skill, but the instructions ask the user to run 'npm install -g @membranehq/cli'. Installing a global npm package executes third-party code on the machine; this is expected for a CLI but worth verifying the package author and package integrity before installing.
Credentials
The skill requests no environment variables or local secrets and explicitly recommends letting Membrane manage credentials rather than asking for API keys locally. It does require the user to have a Membrane account and network access, which is proportional.
Persistence & Privilege
The skill is instruction-only, does not request 'always: true', and does not modify other skills or system-wide settings. Autonomous invocation remains enabled by default on the platform, which is normal—there is no added persistent privilege requested by this skill.
Assessment
This skill appears to be what it says: a Clientify integration that uses the Membrane CLI. Before installing or using it, verify the @membranehq/cli npm package and the Membrane service: check the npm author, package page, and GitHub repository for legitimacy. Be aware that creating a Membrane connection grants that connection (and anyone with access to the Membrane account) the same API-level access to your Clientify data as if you gave an API key — the 'membrane request' proxy can perform arbitrary API calls. If you have sensitive data, consider using least-privilege Clientify accounts or scopes and review Membrane’s privacy/security docs and access controls. If you prefer not to install global packages on your host, run the CLI in an isolated environment (container or VM).Like a lobster shell, security has layers — review code before you run it.
latestvk97ac4bprdghy0x28mcs08t4d1842jvw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.