ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Logoraisr

v1.0.2

Logoraisr integration. Manage Organizations. Use when the user wants to interact with Logoraisr data.

⭐ 0· 67·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Skill purpose (Logoraisr integration) matches the instructions (use Membrane CLI/proxy to call Logoraisr). Minor metadata omission: the skill does not declare that Node/npm or the membrane CLI are required binaries, though the SKILL.md explicitly instructs installing @membranehq/cli.
✓
Instruction Scope
Instructions confine activity to installing/using the Membrane CLI, creating connections, listing actions, running actions, or proxying requests to Logoraisr. They do not ask the agent to read unrelated files or exfiltrate secrets; they explicitly advise not to ask users for API keys.
ℹ
Install Mechanism
No formal install spec in the registry (instruction-only). SKILL.md recommends installing a public npm package (npm install -g @membranehq/cli / npx usage) — a normal but moderately privileged action (global npm install requires local permissions).
✓
Credentials
Skill declares no required environment variables or credentials and the instructions rely on Membrane-managed authentication. No disproportionate credential requests.
✓
Persistence & Privilege
Skill is not always-enabled and does not request system-wide configuration changes. It relies on Membrane's login flow (browser-based) for auth tokens, which is expected for this integration.
Assessment
This skill appears coherent: it uses the Membrane CLI and proxy to interact with Logoraisr and does not ask for unrelated credentials. Before installing, verify the @membranehq/cli package on npm (author/publisher, download counts, and repository), ensure Node/npm are installed and that you are comfortable running a global npm install (requires elevated privileges on some systems), and confirm Membrane/getmembrane.com is an official/trusted service for your organization. Be aware that once you complete membrane login and create a connection, the agent (if allowed to invoke skills autonomously) can call Logoraisr APIs via the Membrane proxy — restrict agent permissions or review logs if you need tighter control.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cwdbd3fp931qwdp8sbnd59d842prh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments