Lagrowthmachine
v1.0.2LaGrowthMachine integration. Manage Leads, Persons, Organizations, Users, Roles, Activities and more. Use when the user wants to interact with LaGrowthMachin...
⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The README and runtime instructions describe using the Membrane CLI to manage LaGrowthMachine resources, which matches the skill name and description. Small inconsistency: the SKILL.md instructs installing and running the Membrane CLI (npm install -g @membranehq/cli) but the skill metadata lists no required binaries (it should document that Node/npm or the membrane CLI is needed). Aside from that omission, the requested capabilities align with the stated purpose.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, logging in, creating connections, listing actions, running actions, and proxying requests to the LaGrowthMachine API. They do not instruct reading unrelated system files or exfiltrating data to unrelated endpoints.
Install Mechanism
Install is npm install -g @membranehq/cli (a public npm package). This is expected for a CLI-based integration but has the usual caveats of installing global npm packages: code will be written to disk and run locally. Recommend verifying the @membranehq/cli package provenance (publisher, npm page, GitHub repo) before installing globally.
Credentials
The skill declares no required environment variables or credentials and relies on Membrane CLI for authentication. Requesting network access and a Membrane account is proportional to the described functionality. Note: authentication tokens will be managed/stored by the Membrane CLI outside the skill; users should be aware of where the CLI stores credentials.
Persistence & Privilege
The skill does not request always: true and has no install spec that would persist code beyond the user's explicit installation of the Membrane CLI. Autonomous invocation of skills (disable-model-invocation=false) is platform default and not a concern here.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to interact with LaGrowthMachine — that matches its description. Before using it: (1) ensure you have Node/npm or otherwise can install the Membrane CLI (the SKILL.md assumes npm but the metadata doesn't declare it); (2) review the @membranehq/cli package on npm/GitHub to confirm its publisher and code are legitimate before installing globally; (3) be aware the Membrane CLI will handle and store authentication tokens locally (review where and how it stores credentials); and (4) if you plan to register inbox/webhook endpoints, understand those endpoints will receive inbound messages and should be secured. If any of these implications are unacceptable, do not install the CLI or proceed without further review.Like a lobster shell, security has layers — review code before you run it.
latestvk9785691k8sj7z1eecj3x4zcxs8424ap
License
MIT-0
Free to use, modify, and redistribute. No attribution required.