Godial
v1.0.2GoDial integration. Manage Leads, Users, Roles, Goals, Filters. Use when the user wants to interact with GoDial data.
⭐ 0· 122·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (GoDial integration) match the instructions: all actions are performed via the Membrane CLI and the skill explicitly requires a Membrane account and network access. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md limits runtime behavior to installing/using the Membrane CLI, logging in, creating a connector, listing/running actions, and proxying requests to the GoDial API. It does not instruct the agent to read local files, other env vars, or exfiltrate unrelated data. It does permit arbitrary proxied API calls to GoDial via Membrane (expected for this integration).
Install Mechanism
The skill is instruction-only (no registry install). It tells users to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal step but carries the usual risks of third-party packages; the SKILL.md does not make the platform install anything automatically.
Credentials
No environment variables or primary credentials are declared or requested. The SKILL.md recommends letting Membrane handle credentials and explicitly advises not to ask users for API keys—this is proportionate for a connector-based integration.
Persistence & Privilege
The skill is not always-enabled (always: false) and does not request persistent system-wide changes. There is no install-time modification of other skills or agent-wide config described.
Assessment
This skill is coherent: it simply documents using the Membrane CLI to connect to GoDial. Before installing or running commands, verify you trust the @membranehq/cli npm package (review the package page, publisher, and source code on GitHub), and confirm the domain (getmembrane.com) is legitimate for your organization. Installing a global npm CLI grants that package the ability to run on your machine—treat it like any third‑party tool. Also be aware that the skill instructs using Membrane to proxy arbitrary API calls to GoDial, so only create connections you trust and avoid passing sensitive unrelated data through the proxy. If you need higher assurance, inspect the Membrane CLI source or use an account with limited permissions for the connector.Like a lobster shell, security has layers — review code before you run it.
latestvk972zbmb1cff6asxr9whq7cyyn843tt3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.