Exhibitday
v1.0.2ExhibitDay integration. Manage Organizations. Use when the user wants to interact with ExhibitDay data.
⭐ 0· 140·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (ExhibitDay integration) match the instructions: the SKILL.md uses Membrane CLI commands to discover and run ExhibitDay actions. The required capabilities (network, Membrane account) are consistent with the stated purpose.
Instruction Scope
The instructions are focused on using the Membrane CLI (login, connect, action list/run, proxy requests). They do not request reading unrelated files or arbitrary environment variables. However, the CLI proxy feature (membrane request) can forward arbitrary ExhibitDay API calls through Membrane, so the skill will cause network requests and transmit ExhibitDay data via the Membrane service.
Install Mechanism
No registry install spec is provided; the README tells users to run npm install -g @membranehq/cli. This is a common pattern but is an out-of-band global npm install (moderate risk). Verify the @membranehq package and repository before installing, and prefer installing in a controlled environment if you have security concerns.
Credentials
The skill declares no environment variables and no credentials in the registry, but it requires an interactive Membrane account login (tokens managed by the Membrane CLI). This is proportionate to the integration, but it does mean you must trust Membrane to hold and refresh ExhibitDay credentials and proxy requests.
Persistence & Privilege
always is false and there is no code that modifies other skills or system-wide agent settings. The skill does not request permanent elevated presence in the agent environment.
Assessment
This skill is coherent: it uses the Membrane CLI to access ExhibitDay and does not ask for unrelated secrets. Before installing, verify the @membranehq/cli package and its repository (the SKILL.md points to github.com/membranedev/application-skills and getmembrane.com). Be aware you'll need to install a global npm CLI and perform an interactive login — the Membrane service will store and proxy ExhibitDay credentials and requests, so only use this skill if you trust that third party. If you prefer tighter control, consider running the Membrane CLI in an isolated environment (container or dedicated VM) or manually calling ExhibitDay APIs with credentials you control.Like a lobster shell, security has layers — review code before you run it.
latestvk97d3w98ygzdw2zvr1zwhc29r9842etw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.