Make Commerce
v1.0.2Make Commerce integration. Manage data, records, and automate workflows. Use when the user wants to interact with Make Commerce data.
⭐ 0· 104·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the skill directs the agent to use the Membrane CLI to interact with Make Commerce connectors, actions, and proxy endpoints. Nothing requested (no env vars, no config paths) is inconsistent with a connector integration.
Instruction Scope
Runtime instructions stay focused on installing and using the Membrane CLI, discovering connectors/actions, running actions, and proxying API requests. The guide requires network access and browser-based login; it does not instruct reading unrelated files or exfiltrating data. Note: it asks you to install and run a global npm CLI and to open a browser for auth, which are expected but worth awareness.
Install Mechanism
No install spec in the registry; SKILL.md recommends installing @membranehq/cli via `npm install -g`. Installing a public npm package is a common pattern but carries the usual supply-chain considerations (review package reputation/version before global install). No obscure download URLs or archive extraction are used.
Credentials
The skill does not request environment variables, secrets, or config paths. Authentication is delegated to Membrane (browser-based login and server-side connection management), which is proportionate to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed by default (normal for skills) but is not combined with broad credential access here.
Assessment
This skill is an instructions-only integration that uses the Membrane CLI to manage Make Commerce data. Before installing or using it: 1) verify the @membranehq/cli package and its GitHub repo (check maintainer, version, and recent activity) before running `npm install -g`; 2) understand that authentication is handled by Membrane—you will log in via browser and Membrane will manage connectors and credentials, so you are trusting a third party with those tokens; 3) for CI/headless use, follow the documented headless login flow carefully and avoid pasting secrets into chats; 4) if you are uncomfortable with the agent invoking the skill autonomously, consider disabling autonomous invocation for your agent or limit when the skill can be used. Overall the skill's requests match its purpose, but exercise normal caution around installing third-party CLIs and delegating credentials to external services.Like a lobster shell, security has layers — review code before you run it.
latestvk973csry3jg4h2z0hpkavpajrd842w8g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.