Enigma
v1.0.2Enigma integration. Manage Deals, Persons, Organizations, Leads, Projects, Activities and more. Use when the user wants to interact with Enigma data.
⭐ 0· 126·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with 'Enigma' (Manage Deals, Persons, Organizations, Leads, Projects, Activities) but the SKILL.md also describes Enigma as a secure communication/collaboration SaaS and otherwise leaves the product ambiguous. The runtime instructions consistently use the Membrane CLI to find connectors, create connections, run actions, or proxy API calls — which is coherent with an integration skill. The mismatch between the initial description (CRM-like entities) and the later 'secure communication' description is a minor inconsistency worth confirming with the publisher.
Instruction Scope
All instructions are CLI-focused: install @membranehq/cli, run membrane login, list/connect to connectors, list actions, run actions, or use membrane request to proxy to the Enigma API. The instructions do not ask the agent to read arbitrary files, access unrelated environment variables, or exfiltrate data to unknown endpoints. They explicitly advise against asking users for API keys and rely on Membrane to manage auth.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells the user to run npm install -g @membranehq/cli. Installing a global npm package modifies the system environment and may require elevated permissions; users should verify the package publisher and package contents before installing. No other download-from-URL or archive extraction is instructed.
Credentials
The skill declares no required environment variables or credentials and relies on Membrane's login flow. That is proportionate: the skill delegates credential management to Membrane and explicitly cautions against collecting local API keys. It does require network access and a Membrane account, which are appropriate for this integration.
Persistence & Privilege
always is false and there are no requests to modify other skills or system-wide agent settings. The skill is user-invocable and can be called autonomously per platform defaults, which is expected for integrations.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to connect to an Enigma connector. Before installing or using it: 1) Verify you trust Membrane/getmembrane.com and the npm package @membranehq/cli (check the npm publisher, GitHub repo, and recent releases). 2) Be aware that npm install -g writes to your system and may require elevated privileges—inspect the package contents if you have security concerns. 3) Confirm which 'Enigma' connector you intend to use (the SKILL.md descriptions are slightly inconsistent about the product type). 4) Understand Membrane will act as a proxy and manage auth server-side—if you process sensitive data, review Membrane's privacy/security documentation and the connector's permissions. 5) Because the agent can invoke the skill autonomously (platform default), consider when and how you allow automated calls that will run CLI commands and make network requests.Like a lobster shell, security has layers — review code before you run it.
latestvk979ahgyh0q96g2yvq108ct3kn8423tg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.