Jobadder
v1.0.0Jobadder integration. Manage data, records, and automate workflows. Use when the user wants to interact with Jobadder data.
⭐ 0· 59·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares Jobadder integration and all instructions relate to connecting to Jobadder via the Membrane CLI and proxying requests; required capabilities (network access, Membrane account, installing the CLI) match the described purpose.
Instruction Scope
SKILL.md only instructs installing/using the @membranehq/cli, creating connections, listing actions, running actions, and proxying requests to the Jobadder API. It does not ask the agent to read unrelated files, request unrelated credentials, or exfiltrate data to unexpected endpoints. It explicitly warns against asking users for API keys.
Install Mechanism
This is an instruction-only skill that tells users to install the Membrane CLI from npm (@membranehq/cli). Installing packages from npm is common and reasonable here, but installing global npm packages carries standard supply-chain/privilege considerations; using npx@latest is suggested in places which reduces persistence. No opaque downloads or extract-from-URL operations are present.
Credentials
The skill requests no environment variables, no credentials, and relies on Membrane to manage authentication. This is proportionate to the stated functionality; there are no unrelated credential requests.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence beyond recommending installing a CLI. Normal agent autonomy remains allowed (default).
Assessment
This skill is coherent and appears to do what it says: it requires you to install and use the Membrane CLI and to sign into a Membrane account so Membrane can proxy authenticated Jobadder requests. Before installing, verify you trust Membrane (getmembrane.com/@membranehq package) because the CLI will cause requests and credentials to be handled by Membrane's service; prefer npx usage to avoid global installs if you want to limit system-wide changes. Also confirm the npm package name and repository are legitimate (check the upstream GitHub and publisher) and be aware that using the proxy means Jobadder data will transit/possibly be stored by the third-party Membrane service per their policies.Like a lobster shell, security has layers — review code before you run it.
latestvk97238m9tdtrb0yxw4m2ws31hx84b08s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.