Craftcms
v1.0.0CraftCMS integration. Manage data, records, and automate workflows. Use when the user wants to interact with CraftCMS data.
⭐ 0· 54·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (CraftCMS integration) match the instructions: all operations are done through the Membrane CLI and proxy to CraftCMS. Required capabilities (network + Membrane account) are appropriate for the stated purpose.
Instruction Scope
SKILL.md instructs only CLI commands (membrane login, connect, action list/run, request) that are directly related to interacting with CraftCMS via Membrane. The instructions do not ask the agent to read unrelated files or environment variables.
Install Mechanism
There is no formal install spec in the registry (skill is instruction-only), but the doc tells users to run `npm install -g @membranehq/cli`. Installing a public npm CLI is expected for this integration but carries the usual supply-chain risk of global npm packages; consider using npx or reviewing the package first.
Credentials
The skill declares no required env vars, credentials, or config paths. Authentication is delegated to Membrane (browser OAuth flow), which is proportionate to the purpose.
Persistence & Privilege
Skill is not always-enabled and does not request persistent system privileges or modify other skills. It is user-invocable and can be called autonomously by the agent (platform default), which is normal for skills.
Assessment
This skill is coherent: it delegates CraftCMS access to the Membrane service via their CLI. Before installing or using it, verify you trust Membrane/@membranehq/cli (review the npm package and upstream repo), consider using npx rather than a global install, and be aware that CraftCMS data and API calls will flow through Membrane's servers (check their privacy/security policies). If you need to avoid a third party seeing your data, do not use a proxy-based integration.Like a lobster shell, security has layers — review code before you run it.
latestvk975c8rvvngnk29je81pn1drqs844ejk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
