ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Klazify

v1.0.2

Klazify integration. Manage data, records, and automate workflows. Use when the user wants to interact with Klazify data.

⭐ 0· 157·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim Klazify integration; the instructions consistently show how to install and use the Membrane CLI to connect to Klazify and run actions. Required capabilities (network, a Membrane account, and the Membrane CLI) align with the declared purpose.
✓
Instruction Scope
SKILL.md instructs only CLI installation, login via browser, creating connections, listing actions, running actions, and optionally proxying API requests through Membrane. It does not instruct reading unrelated files or exfiltrating data, nor does it request environment variables or system paths outside the integration flow.
ℹ
Install Mechanism
There is no automatic install spec in the registry (skill is instruction-only), but the runtime docs tell users to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal way to get the CLI but does execute code from the npm registry — verify the package name, publisher, and use non-root install practices if appropriate.
✓
Credentials
The skill declares no required environment variables or local secrets. It relies on Membrane to handle authentication server-side and advises not to ask users for API keys; this is proportionate to the described functionality. Note: using Membrane means users will authenticate through Membrane and delegate access to that service.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated agent privileges. The only persistent side-effect is the normal Membrane CLI login state (user-managed) if the user performs the documented login steps.
Assessment
This skill is instruction-only and appears consistent with a Klazify->Membrane integration. Before installing or using it: (1) verify the npm package (@membranehq/cli) name and publisher on the npm registry to ensure it’s official, (2) prefer installing CLIs without root/global permissions when possible, (3) review what permissions/access you grant during the Membrane login/connection flow (you are delegating access to Membrane), and (4) if you need stronger assurances, inspect the upstream repository (https://github.com/membranedev/application-skills) and Membrane's privacy/security docs before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dh0zcvvs64a0qw82mqcnwk9842ttr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments