Formsite
v1.0.2Formsite integration. Manage Forms, Users. Use when the user wants to interact with Formsite data.
⭐ 0· 125·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes Formsite operations (forms, webhooks, results) and only requires the Membrane CLI to access Formsite via Membrane connectors — the requested capabilities match the described purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, creating connections, running actions, and proxying API calls. It does not instruct reading arbitrary local files, enumerating unrelated services, or exfiltrating data.
Install Mechanism
The skill is instruction-only (no install spec), but directs users to run `npm install -g @membranehq/cli`. Global npm installs are a standard delivery method but have moderate risk (third-party package, requires trusting @membranehq/cli).
Credentials
No environment variables, secrets, or config paths are requested. The instructions explicitly advise against asking users for API keys and rely on Membrane-managed credentials, which is proportionate for this integration.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable only. It does require network access and browser-based authentication to Membrane, which is expected.
Assessment
This skill is internally consistent: it uses the Membrane CLI to connect to Formsite and does not ask for unrelated credentials. Before installing, verify you trust @membranehq/cli and the Membrane service (review their docs, privacy, and permissions). Installing the CLI globally requires npm and may need admin rights — consider installing in a controlled environment or reviewing the package source on GitHub. When connecting, review what permissions the connector requests and avoid pasting secrets into chat — Membrane is advertised to manage credentials server-side, so you must trust that external service to handle auth and token refresh.Like a lobster shell, security has layers — review code before you run it.
latestvk97794b4apyh0jmtb9xvj6yks1842b7k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.