Feathery
v1.0.2Feathery integration. Manage Organizations, Users. Use when the user wants to interact with Feathery data.
⭐ 0· 108·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Feathery integration) align with the instructions: all runtime actions call the Membrane CLI to manage Feathery workspaces, forms, users, and submissions. The required capabilities (network + a Membrane account) are appropriate and expected.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI, performing connector discovery, running pre-built actions, and (when necessary) proxying requests to the Feathery API via Membrane. The proxy feature permits arbitrary API calls to the Feathery account (expected for an integration), so users should be aware that actions run via the connection can access any Feathery API endpoints permitted by that connection.
Install Mechanism
This is an instruction-only skill (no platform install spec). It instructs the user to run `npm install -g @membranehq/cli` — a public npm package. Installing a global npm CLI is a reasonable, common instruction but carries the usual supply-chain risk of npm packages; the skill does not attempt to download arbitrary binaries or use untrusted URLs.
Credentials
The skill declares no required environment variables or local credentials. Authentication is delegated to Membrane (browser login / connection flow), which is proportional to the integration's needs. There are no requests for unrelated secrets or system config paths.
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not ask for permanent platform presence or modify other skills. Note: model invocation is allowed by default (normal for skills); this is not in itself a problem here.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Feathery and does not ask for unrelated secrets. Before installing or using it: (1) confirm you trust the @membranehq/cli npm package and review its repo/releases; (2) be aware that connections created via Membrane grant that connector whatever Feathery API access the connection authorizes — limit connector privileges if possible; (3) prefer running CLI steps in a controlled environment (not on an untrusted shared machine); and (4) verify any actions the agent runs, since the proxy feature can call arbitrary Feathery endpoints on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk97cnkxzbdy80ypny6d50fz7p9842aph
License
MIT-0
Free to use, modify, and redistribute. No attribution required.