Forcemanager
v1.0.2ForceManager integration. Manage data, records, and automate workflows. Use when the user wants to interact with ForceManager data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the actions in SKILL.md: all commands and flows are about using the Membrane CLI to connect to ForceManager, list actions, run actions, and proxy API requests. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions are narrowly scoped to installing/using the Membrane CLI, creating a connection via browser auth, listing and running actions, and proxying requests. The proxy capability lets the user send arbitrary API requests through Membrane (expected for this integration) — exercise normal caution before executing requests that modify data.
Install Mechanism
The SKILL.md instructs installing @membranehq/cli via npm (or using npx). This is expected for a CLI-driven skill, but installing a global npm package comes with standard supply-chain risks; verify the package and publisher before installing (or prefer npx to avoid global installs).
Credentials
No environment variables, credentials, or config paths are requested by the skill. The only external requirement is a Membrane account and browser-based authentication, which is consistent with the skill's design and the SKILL.md guidance to let Membrane manage secrets server-side.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It permits autonomous invocation (platform default) but does not request elevated system persistence or modify other skills' configs.
Assessment
This skill appears coherent: it simply instructs the agent to use the Membrane CLI to access ForceManager. Before installing, verify the Membrane CLI package/publisher (npm package ownership, official docs or GitHub repo) and consider using npx to avoid a global install. Remember that once you create a connection, actions (including proxied API requests) can read or modify your ForceManager data — only run commands you understand and trust. If you need stronger assurance, inspect @membranehq/cli source on its official repo and confirm the connector details when authorizing access.Like a lobster shell, security has layers — review code before you run it.
latestvk970kxsf15wy6xpxgkzag04w6n842pyj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.