Escape
v1.0.2Escape integration. Manage data, records, and automate workflows. Use when the user wants to interact with Escape data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Escape' integration and the instructions consistently use Membrane (a proxy/connector) to discover and run Escape actions; required capabilities (network access, Membrane account, Membrane CLI) match the stated purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, performing an interactive login, listing/connecting to connectors, running actions, and proxying requests to Escape via Membrane. It does not ask the agent to read unrelated files, environment variables, or exfiltrate data outside the expected Membrane/Escape flow. Note: proxying allows arbitrary API requests to Escape under the user's authenticated connection, which is expected for this integration.
Install Mechanism
There is no built-in install spec; the doc instructs users to run 'npm install -g @membranehq/cli' (or npx). Installing a global npm CLI is a normal but non-trivial action (writes to system) and pulls code from the npm registry — a moderate-risk operation that is appropriate here but worth verifying the package/source before installing.
Credentials
The skill declares no required environment variables or credentials. It intentionally relies on Membrane's auth flow (interactive login and connector creation) rather than requesting API keys, which is proportionate to the purpose.
Persistence & Privilege
The skill does not request permanent inclusion (always:false) and does not attempt to modify other skill or system configurations. Autonomous invocation is permitted (platform default) and not, by itself, a red flag here.
Assessment
This skill is coherent: it instructs you to install and use the Membrane CLI to connect to Escape and does not ask for unrelated secrets. Before installing, verify the @membranehq/cli package and its source (check the npm publisher and GitHub repo), be aware that 'npm install -g' modifies your system/global bin, and only connect accounts you trust. If you're unsure, run the CLI in a sandbox/container or review the CLI's repository and permissions before proceeding. Remember that Membrane will act on your behalf via the created connection, so limit that connection's permissions as appropriate.Like a lobster shell, security has layers — review code before you run it.
latestvk976p71jzwrx7j6bscrj0p6rws843ykf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.