Encharge
v1.0.2Encharge integration. Manage Persons, Organizations, Deals, Pipelines, Activities, Notes and more. Use when the user wants to interact with Encharge data.
⭐ 0· 88·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Encharge integration) match the instructions: discover and run Encharge actions via the Membrane CLI and Membrane proxy. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md confines runtime actions to installing/using the Membrane CLI, logging in, creating/using a connection, listing/running actions, and proxying requests to the Encharge API. It does not instruct the agent to read unrelated files, harvest credentials, or POST data to unexpected endpoints. It explicitly advises not to ask the user for API keys.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The README recommends installing @membranehq/cli via npm -g, which is a standard public registry package (moderate risk compared to no install). This is proportionate to the described workflow but requires the user to trust the npm package and run a global install.
Credentials
The skill declares no required environment variables or credentials and delegates auth to Membrane. Network access and a Membrane account are reasonable and proportional to the task. No unrelated secrets are requested.
Persistence & Privilege
always is false and the skill is instruction-only with no install-time persistence. It does not request system-wide config changes or elevated privileges in the instructions.
Assessment
This skill is coherent: it instructs the agent to use the Membrane CLI/service to access Encharge rather than asking for API keys. Before installing or running it, verify you trust the Membrane project (@membranehq/cli and getmembrane.com)—check the npm package page, GitHub repo, and reviews. Installing the CLI with npm -g requires write access to your system and will run code from the npm registry. Be aware that using Membrane means proxied requests and authentication will go through Membrane’s servers (they will see API traffic and manage tokens). If you cannot or do not want a third party to see your Encharge data, do not use this skill. Finally, avoid pasting secrets into chat; follow the skill’s guidance to create a connection through Membrane’s login flow instead.Like a lobster shell, security has layers — review code before you run it.
latestvk97eq9z93mny4wp66axbt69a05842gzk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.