ClawHub

Linguapop

v1.0.2

Linguapop integration. Manage Users, Organizations. Use when the user wants to interact with Linguapop data.

⭐ 0· 111·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim Linguapop integration and the instructions consistently describe using the Membrane CLI to connect and proxy requests to Linguapop. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, logging in, creating connections, listing/running actions, and proxying API calls. It does not ask the agent to read unrelated files, access other credentials, or exfiltrate data to unexpected endpoints.
ℹ
Install Mechanism
There is no packaged install spec for the skill itself (instruction-only), but the instructions require running `npm install -g @membranehq/cli`. Installing a global npm package is a real side-effect and pulls code from the public registry—this is expected for using the Membrane CLI but has the usual risks of third-party packages (verify authenticity/pinned versions).
✓
Credentials
The skill declares no required env vars or secrets. Authentication is delegated to Membrane's browser-based login flow; that is proportionate to the stated purpose.
✓
Persistence & Privilege
'always' is false and the skill is instruction-only. The default ability for agents to invoke the skill autonomously is unchanged and, by itself, is not a red flag here.
Assessment
This skill appears coherent with its purpose. Before installing or following the SKILL.md steps: (1) verify the @membranehq/cli package and the getmembrane.com project are legitimate (check the package owner, latest version, and repository), (2) prefer installing tools in a controlled environment (container or local project) rather than globally if you are cautious, (3) review browser auth consent screens when logging in to Membrane, and (4) limit the connection scope in Membrane to only the Linguapop resources you intend to expose. If you need higher assurance, inspect Membrane's source or use a pinned CLI version from a trusted release.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d63nphnda8bzp9jcef57dwh843w7r

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments