Imagga
v1.0.2Imagga integration. Manage data, records, and automate workflows. Use when the user wants to interact with Imagga data.
⭐ 0· 122·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, examples of actions (tagging, OCR, crop, etc.), and the runtime instructions all focus on Imagga access via Membrane. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, creating a connector and running actions or proxying raw requests to Imagga. They do not ask the agent to read local files or unrelated environment variables. Note: using the proxy will route image/content and metadata through Membrane's servers — a privacy/third-party-data-flow consideration.
Install Mechanism
There is no built-in install spec, but the SKILL.md tells users to run `npm install -g @membranehq/cli` (a public npm package). This is expected for a CLI-based integration; global npm installs can execute arbitrary install scripts, so install only if you trust the package/provider.
Credentials
The skill requests no environment variables or credentials and explicitly advises against asking users for API keys; authentication is delegated to Membrane, which is proportionate to the described purpose.
Persistence & Privilege
Skill is instruction-only, does not request always:true, and does not modify other skills or system-wide agent settings. Normal autonomous invocation is allowed by platform default but not requested by the skill itself.
Scan Findings in Context
[no-findings] expected: No code files present; the regex-based scanner had nothing to analyze. That is expected for an instruction-only skill.
Assessment
This skill appears coherent: it instructs use of the Membrane CLI to connect to Imagga and does not ask for unrelated credentials. Before installing or using it, verify you trust Membrane (https://getmembrane.com/@membranehq/cli): installing the CLI requires `npm install -g` (which runs code on your machine) and authenticating opens a browser flow. Understand that images and request data will be proxied through Membrane — do not send highly sensitive images or data unless you trust their privacy/retention policies. If you need stricter control, consider using Imagga's API directly with your own API keys in a controlled environment. Finally, only run these commands in environments where global npm installs and browser-based auth flows are acceptable.Like a lobster shell, security has layers — review code before you run it.
latestvk971q245jxzznk5awtjmaph92984330d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.