Mailerlite
v1.0.2Mailerlite integration. Manage Subscribers, Campaigns, Forms, Websites. Use when the user wants to interact with Mailerlite data.
⭐ 0· 97·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Mailerlite integration) matches the instructions: all operations are performed via the Membrane CLI and/or Membrane's proxy to Mailerlite. No unrelated services, credentials, or binaries are requested.
Instruction Scope
SKILL.md restricts runtime actions to installing/using the Membrane CLI, creating and using connections, listing and running actions, and proxied API requests to Mailerlite. It does not instruct reading unrelated files, environment variables, or sending data to unexpected endpoints.
Install Mechanism
The skill recommends installing @membranehq/cli via npm (global). This is a reasonable and expected installation path for a CLI integration, but global npm installs modify the system and require trust in the npm package. The registry metadata listed no required binaries although the skill requires the Membrane CLI at runtime — this is a minor mismatch (instruction-only skills often assume the CLI will be installed when needed).
Credentials
No environment variables or secrets are requested by the skill. The README explicitly says Membrane handles credentials server-side and the skill does not ask for API keys or tokens, which is proportional to the stated design.
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges. It is user-invocable and allows normal autonomous invocation (platform default). No installation writes or cross-skill config changes are suggested.
Assessment
This skill is instruction-only and delegates all Mailerlite access to the Membrane CLI/service. Before installing: verify the authenticity of the @membranehq/cli npm package (check the homepage and GitHub repo), understand that npm install -g will modify your environment, and be prepared to complete a browser-based login for Membrane. The skill does not ask for Mailerlite API keys or local secrets, but it does require network access and a Membrane account — only proceed if you trust the Membrane CLI and service.Like a lobster shell, security has layers — review code before you run it.
latestvk971n3kyqevstwwg57p7ehpbr58423vc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.