Isn
v1.0.2ISN integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with ISN data.
⭐ 0· 141·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with ISN and all instructions use the Membrane CLI to discover and run ISN-related actions or proxy requests to the ISN API. The requested capabilities (auth via Membrane, action listing, proxying) match the stated purpose. Minor note: the registry metadata lists no required binaries, but the SKILL.md instructs the user to install the 'membrane' CLI — the runtime does implicitly expect that binary to be available.
Instruction Scope
SKILL.md stays on-topic: it instructs installing the Membrane CLI, logging in, creating a connection to ISN, listing actions, running actions, and proxying API calls via Membrane. It does not ask the agent to read arbitrary local files, environment credentials, or other unrelated system state. It explicitly instructs not to ask users for API keys and to let Membrane handle credentials.
Install Mechanism
This is an instruction-only skill (no install spec). It tells the user to run 'npm install -g @membranehq/cli' to obtain the CLI. That is an expected, low-risk recommendation, but the registry did not declare the membrane binary as a required runtime dependency — a small metadata omission to be aware of. No remote, untrusted downloads or extract/install automation are present in the skill bundle itself.
Credentials
The skill declares no required environment variables or credentials. SKILL.md explicitly discourages asking users for API keys and relies on Membrane for auth, which is proportionate for this integration.
Persistence & Privilege
always is false and the skill is user-invocable. There is no indication the skill attempts to modify other skills or agent-wide configuration. It does require network access and a Membrane account as documented, which is reasonable for its purpose.
Assessment
This skill appears to do exactly what it says: it uses the Membrane CLI to connect to ISN and run or proxy API actions. Before installing/using it, be aware you'll need to: (1) install the Membrane CLI (npm -g) so the 'membrane' command is available, (2) sign in to a Membrane account (browser-based login), and (3) trust Membrane to store and proxy your ISN credentials. The registry metadata omits declaring the CLI binary as a requirement — that's a bookkeeping omission, not a functional red flag. If you don't already trust getmembrane.com / @membranehq, review their docs and the repository (https://github.com/membranedev/application-skills) and limit what data you proxy through Membrane. Also confirm you are comfortable with the agent executing the suggested CLI commands on your system (they will run in a shell when invoked).Like a lobster shell, security has layers — review code before you run it.
latestvk9735q38nrwmzyrkqqfsw4yab9843921
License
MIT-0
Free to use, modify, and redistribute. No attribution required.