Companyhub
v1.0.0CompanyHub integration. Manage data, records, and automate workflows. Use when the user wants to interact with CompanyHub data.
⭐ 0· 79·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the instructions: all actions are performed via the Membrane CLI and target CompanyHub. The skill does not request unrelated credentials, binaries, or filesystem paths.
Instruction Scope
SKILL.md instructs the agent to install and run the Membrane CLI, create connections, list and run actions, and (if needed) proxy direct CompanyHub API requests through Membrane. It does not ask the agent to read arbitrary local files or pull unrelated secrets. Note: proxying requests through Membrane means request payloads and metadata will be handled by the Membrane service.
Install Mechanism
There is no formal install spec in the skill bundle, but SKILL.md instructs the user to run `npm install -g @membranehq/cli`. Installing a global npm CLI is a common approach but carries normal risks (global binary creation, need for elevated npm privileges on some systems). The instruction uses an npm-scoped package rather than an arbitrary URL or extractor, which is proportionate.
Credentials
The skill declares no required environment variables or local credentials, which is proportional. However, using Membrane means authentication and API access are managed server-side by Membrane—so your Membrane account (and Membrane's service) will have access to CompanyHub data and proxied request contents. Consider this data exposure before use.
Persistence & Privilege
The skill is instruction-only and does not request persistent agent privileges (always is false). Installing the CLI creates a persistent binary on the host, but the skill itself does not alter agent settings or demand permanent inclusion.
Assessment
This skill appears internally consistent: it tells you to install the official-sounding Membrane CLI and then use it to manage CompanyHub via connections and proxied API calls. Before installing or using it, verify the @membranehq/cli package on the npm registry (publisher, download counts, and repository), confirm your organization allows installing global npm CLIs, and review Membrane's privacy/security documentation because Membrane's service will see proxied requests and manage credentials. If you handle sensitive CRM data, check whether your data governance policy permits routing data through a third-party service. Run the CLI in a controlled environment and avoid pasting secrets into free-form proxy calls unless you trust the service and logging policies.Like a lobster shell, security has layers — review code before you run it.
latestvk979hzfbqz0qc9pmd41vftf3t183k87s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.