Cookie Information
v1.0.2Cookie Information integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cookie Information data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (Cookie Information integration) aligns with the runtime instructions, which consistently use Membrane to access Cookie Information APIs. However, the registry metadata lists no required binaries while the SKILL.md clearly expects the '@membranehq/cli' to be installed and available on PATH — a minor incoherence in declared requirements.
Instruction Scope
SKILL.md confines actions to using the Membrane CLI and the Cookie Information API (via Membrane). It instructs the user to run login/connect/action commands and to use Membrane's proxy for custom API calls. It does not instruct reading unrelated local files or requiring unrelated credentials; it explicitly advises against asking users for API keys.
Install Mechanism
There is no formal install spec in the registry (instruction-only skill). The instructions recommend installing the Membrane CLI with a global npm install (npm install -g @membranehq/cli). Global npm installs execute third-party code on the host (moderate risk) but are expected for a CLI-based integration — this is proportional but worth attention (verify package provenance).
Credentials
The skill declares no environment variables or credentials and the instructions rely on Membrane for auth management (browser-based login/connector flow). That is proportionate: no unrelated secrets are requested and Membrane is positioned as handling credential lifecycle server-side.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide agent settings. It is user-invocable and allows autonomous invocation (platform default) which is expected for an integration skill.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to manage Cookie Information resources and explicitly avoids asking for raw API keys. Before installing or running commands: 1) Verify you trust the @membranehq/cli package and the getmembrane.com domain (check the npm package owner and GitHub repository). 2) Be aware the SKILL.md recommends a global npm install (this runs third-party code on your machine) — prefer using a scoped install or sandbox if you’re cautious. 3) Expect browser-based login and connector flow; you will authorize access in your browser. 4) Confirm the missing metadata declaration (required binary) with the skill author if you need formal dependency guarantees. If any command or connector output asks for secrets beyond the Membrane login flow, stop and verify the request.Like a lobster shell, security has layers — review code before you run it.
latestvk976t13ydcrkm3fypnvmhrk09n842k76
License
MIT-0
Free to use, modify, and redistribute. No attribution required.