Formcarry
v1.0.2Formcarry integration. Manage Forms. Use when the user wants to interact with Formcarry data.
⭐ 0· 112·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Formcarry and describes using the Membrane CLI to manage connections, run actions, and proxy requests. Requiring the Membrane CLI and a Membrane account is coherent with that purpose.
Instruction Scope
SKILL.md contains step-by-step CLI instructions (install CLI, login, create/list connections, run actions, proxy requests). It does not instruct reading unrelated files, exposing local secrets, or sending data to unexpected endpoints beyond Membrane/Formcarry.
Install Mechanism
The skill instructs installing @membranehq/cli via npm -g. Installing a public npm CLI is a reasonable way to get the required tooling, but it is a moderate-risk install vector compared to instruction-only skills because it writes code to the system and requires network/package registry trust.
Credentials
The skill declares no required environment variables or credentials and explicitly advises against asking users for API keys, instead using Membrane-managed connections. The requested permissions (Membrane login and browser auth) are proportional to the task.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request persistent system-wide privileges or modification of other skills/config; autonomous invocation is allowed (platform default) and appropriate here.
Assessment
This skill is coherent but requires installing and using the third-party Membrane CLI and authenticating via your browser. Before installing: verify the npm package (@membranehq/cli) and its publisher on the npm registry and GitHub repo, consider installing it in a controlled environment (container or VM) if you want to limit system impact, and be aware Membrane will proxy requests to Formcarry (so submitted data and credentials are handled by Membrane's service). If you do not trust Membrane or do not want a third party to handle authentication, do not install and instead use Formcarry’s official APIs directly.Like a lobster shell, security has layers — review code before you run it.
latestvk975g4bn5n11rx7dhvp35np8tx842s0x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.