Contact Enhance
v1.0.2Contact Enhance integration. Manage data, records, and automate workflows. Use when the user wants to interact with Contact Enhance data.
⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Contact Enhance via Membrane and all runtime instructions use the Membrane CLI and a Membrane account — this is coherent with the stated purpose. However, the registry metadata does not declare the Membrane CLI, npm, or network access as required binaries/constraints even though SKILL.md requires installing and running @membranehq/cli and states network + Membrane account are needed.
Instruction Scope
SKILL.md stays on-scope: it instructs the agent to use the Membrane CLI to discover connectors, create connections, list/run actions, and optionally proxy arbitrary API calls through Membrane. There are no instructions to read unrelated files, environment variables, or local secrets. Note: the 'membrane request' proxy can send arbitrary request bodies/paths to the external API via Membrane, which is expected for this use case.
Install Mechanism
This is an instruction-only skill, but the README asks users to run 'npm install -g @membranehq/cli' or use 'npx'. Installing a global npm package or invoking npx pulls code from the public npm registry (moderate risk compared to instruction-only). The skill itself does not include an automated install spec in the registry metadata.
Credentials
No environment variables or credentials are requested by the skill; SKILL.md explicitly advises letting Membrane manage credentials and not asking the user for API keys. The requirement for a Membrane account and network access is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-on and is user-invocable. It does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) and not combined with other concerning indicators.
Assessment
This skill appears to do what it says: use Membrane to access Contact Enhance. Before installing or running commands: (1) Verify and review the @membranehq/cli package on npm/GitHub (source, maintainers, recent releases). (2) Prefer npx for one-off use to avoid global npm installs, or inspect the package before installing globally. (3) Understand that Membrane will proxy API calls and hold auth credentials — only use if you trust Membrane and its permissions. (4) The registry metadata did not declare the Membrane CLI or network requirement; be prepared to install the CLI and ensure network access and a Membrane account. (5) Avoid pasting sensitive local secrets into any proxied request bodies; review what data you send through 'membrane request' so you don't unintentionally transmit unrelated private data.Like a lobster shell, security has layers — review code before you run it.
latestvk97b873jmg01tw06hk2kbv5qx18420tx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.