ClawHub

Icontact

v1.0.2

IContact integration. Manage Persons, Organizations, Deals, Activities, Pipelines, Leads and more. Use when the user wants to interact with IContact data.

⭐ 0· 88·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description describe an IContact integration and the SKILL.md consistently instructs using the Membrane CLI and Membrane connections to access IContact. Requiring a Membrane account and network access is coherent with that purpose.
ℹ
Instruction Scope
Runtime instructions only call the Membrane CLI and describe creating connections, running actions, and proxying requests through Membrane — all within the stated scope. Minor incoherence: the SKILL.md lists 'Official docs' pointing to Apple's Contacts developer docs (developer.apple.com/documentation/contacts), which is unrelated to the iContact API and likely a mistaken link; verify documentation/source.
ℹ
Install Mechanism
No formal install spec is in the registry (instruction-only), but the README tells users to install the Membrane CLI via 'npm install -g @membranehq/cli'. This is a normal developer instruction but has the typical risks of installing a global npm package — verify the package identity and publisher on npm before running.
✓
Credentials
The skill requests no environment variables or local credentials and explicitly advises against asking users for API keys. However, using the skill routes IContact access through Membrane, so Membrane's service will hold and manage the user's IContact credentials — confirm you trust Membrane and understand their data handling.
✓
Persistence & Privilege
The skill is not always-enabled, is user-invocable, has no install scripts or files, and doesn't request system-wide configuration. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
Assessment
Before installing/use: - Confirm you intend to use Membrane as the broker: this skill delegates auth and API calls to the Membrane service, which will hold credentials and see exchanged data. - Verify @membranehq/cli is the official package on npm and review its maintainers and recent release history before running a global install. - Check the skill's reported homepage/repository (https://getmembrane.com and https://github.com/membranedev/application-skills) to ensure the publisher is legitimate; the registry owner id in metadata is opaque — prefer packages with clear maintainers. - Note the SKILL.md contains an incorrect 'Official docs' link (Apple Contacts) — confirm API details from the official iContact developer docs if you need direct API behavior. - In headless or automated environments, use the documented headless login flow carefully to avoid leaking auth codes; avoid pasting secrets into chat. If any of the above checks fail or you do not trust Membrane's privacy/security posture, do not install or use this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk976d3w62801ddwa9r3px0ncjx843s88

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments