Inxmail
v1.0.2Inxmail integration. Manage data, records, and automate workflows. Use when the user wants to interact with Inxmail data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md shows how to interact with Inxmail via the Membrane CLI (connect, list actions, run actions, proxy requests). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions focus on installing and using the Membrane CLI, creating a connection, listing/running actions and proxying requests to the Inxmail API. They do not instruct reading unrelated local files or environment variables. The ability to send arbitrary proxied requests to Inxmail is expected for this integration, but does grant broad API access once a connection is authorized.
Install Mechanism
There is no manifest install spec (instruction-only skill). The README tells the user to run npm install -g @membranehq/cli (public npm). That's a reasonable, expected installation path but installing a global npm package executes third-party code — verify the package and publisher before installing.
Credentials
The skill declares no required env vars or credentials and explicitly advises using Membrane-managed connections rather than asking for API keys. Requested access is proportional to the task (network + Membrane account).
Persistence & Privilege
always is false and the skill does not request permanent presence or modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) and not by itself a concern here.
Assessment
This skill is coherent for connecting to Inxmail via Membrane, but before installing or using it: 1) Confirm you trust the Membrane CLI package and publisher (check the npm package page and GitHub repo). 2) Be aware that 'membrane connect' will authorize Membrane to act on your Inxmail account—treat that like giving the service API access. 3) The skill allows proxied/raw API requests; avoid sending sensitive data unless you trust Membrane's handling and privacy policy. 4) Installing a global npm package runs third-party code on your machine—only install if you trust the source. 5) If you plan to allow autonomous agent invocation in sensitive environments, consider limiting when and how this skill is used or requiring explicit user approval for actions that read or modify large volumes of data.Like a lobster shell, security has layers — review code before you run it.
latestvk971wtfgnpe339p7djdaewmsdd843ygr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.