Launch27
v1.0.0Launch27 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Launch27 data.
⭐ 0· 60·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description (Launch27 integration) match the runtime instructions: it uses the Membrane CLI to connect to Launch27, list actions, run actions, and proxy raw API requests. One minor inconsistency: registry metadata lists no required binaries or network/auth requirements, but SKILL.md clearly requires network access and the Membrane CLI/account.
Instruction Scope
SKILL.md stays on-topic: it instructs installing and using the Membrane CLI, creating connections, listing and running actions, and optionally proxying raw Launch27 API requests via Membrane. It does not instruct reading unrelated files or exfiltrating environment variables. The proxy feature can perform arbitrary Launch27 API requests, which is expected for this integration.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the README tells users to install @membranehq/cli globally via npm. Installing a global npm CLI is a normal, moderate-risk action but it does alter the host environment and requires trust in the npm package/maintainer. This install step is proportionate to the described functionality but should be acknowledged by the user.
Credentials
The skill requests no environment variables or credentials and explicitly recommends letting Membrane handle authentication rather than asking the user for API keys. That aligns with the stated design and is proportionate to the integration.
Persistence & Privilege
The skill does not request persistent or elevated privileges (always: false). It is user-invocable and allows autonomous invocation by default, which is the platform norm; nothing else in the skill attempts to modify other skills or system-wide agent settings.
Assessment
Before installing/use:
- Understand the central dependency: this skill expects you to install and use the @membranehq/cli (npm global package) and to have a Membrane account — the registry metadata did not declare this dependency explicitly. Installing a global npm package alters your environment and requires trust in that package and its publisher.
- The skill delegates authentication to Membrane and will open a browser-based login flow; do not enter Launch27 credentials into unknown prompts — verify you're interacting with legitimate Membrane pages.
- 'membrane request' can send arbitrary requests to the Launch27 API on behalf of your connected account. Only run requests you trust, because they can read or modify your Launch27 data.
- If you need higher assurance, review the @membranehq/cli package on the npm registry / its GitHub repo and verify the publisher, release history, and source code before installing.
- Overall: the skill appears internally coherent and fit-for-purpose, but proceed only if you trust Membrane and are comfortable installing a third-party CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk97bj4ht992zsegjn44extjpw584b68a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.