Instabot
v1.0.2Instabot integration. Manage Chatbots, Users. Use when the user wants to interact with Instabot data.
⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Instabot integration) match the instructions: installing the Membrane CLI, logging in, creating a connector, and running actions or proxied requests to Instabot. Nothing requested (no unrelated env vars or system paths) is inconsistent with the stated purpose.
Instruction Scope
SKILL.md instructs use of the Membrane CLI (login, connect, action run, request proxy). This stays within the integration scope, but the proxy command enables arbitrary proxied requests to the Instabot API — expected for an integration but important to know because it can read/modify account data depending on the connection's scope.
Install Mechanism
There is no formal install spec in the registry metadata, but the instructions ask the user to install @membranehq/cli via 'npm install -g', which is a standard npm install (moderate risk compared with a direct arbitrary download). Users should confirm the package identity and trustworthiness before installing globally.
Credentials
No environment variables, secrets, or config paths are requested by the skill. Authentication is delegated to Membrane's login flow (browser-based OAuth-like flow), which is proportional to the integration's needs.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide settings. It relies on the Membrane CLI and the user-driven login flow; autonomous invocation is allowed (platform default) but not combined with elevated privileges.
Assessment
This is an instruction-only skill that delegates auth and API calls to the Membrane CLI. Before installing or running it: (1) verify you trust the @membranehq/cli npm package and the getmembrane.com project (check the npm package page and repository), (2) be aware the CLI will open a browser for login and will store credentials/tokens via Membrane—those tokens grant access to your Instabot account, (3) the 'membrane request' proxy can perform arbitrary API calls on your behalf, so limit use to trusted commands and review what actions you permit, and (4) if you cannot or will not install global npm packages, run the CLI in a controlled environment or container. If you need higher assurance, ask the publisher for a signed release or inspect the CLI source before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk973c0e44bgty8brswpnrfszqs842mx3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.