Mamo Business
v1.0.2Mamo Business integration. Manage Organizations, Pipelines, Users, Goals, Filters. Use when the user wants to interact with Mamo Business data.
⭐ 0· 111·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Mamo Business integration' and the SKILL.md exclusively documents using the Membrane CLI to connect, list connections/actions, run actions, and proxy requests to Mamo Business — all expected for this integration.
Instruction Scope
Instructions stay within the integration scope (login, create connection, list/run actions, proxy requests). They do ask the user to install and run the Membrane CLI and to authenticate via browser; they also recommend using npx @membranehq/cli@latest which will fetch remote code at runtime—this is expected but worth noting as a runtime behavior.
Install Mechanism
No registry-level install spec is provided, but SKILL.md recommends installing @membranehq/cli via npm -g and suggests npx to fetch latest at runtime. An npm package is a plausible install method, but installing global npm packages and using npx executes code from the public registry and has moderate risk compared with an instruction-only skill that requires no installs.
Credentials
The skill declares no environment variables or credentials. The instructions explicitly state that Membrane manages credentials server-side and do not ask for API keys or secrets locally — this is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request system config paths or persistent agent-wide privileges. There is no evidence it modifies other skills or system-wide settings.
Assessment
This skill appears to do what it claims: it uses the Membrane CLI to manage a Mamo Business connection and proxy API calls. Before installing, verify you trust the Membrane project and the npm package @membranehq/cli (inspect the package page and GitHub repo). Be aware that: (1) npm -g installation and npx @membranehq/cli@latest will fetch and run code from the npm registry (review postinstall scripts and prefer pinned versions if you want reproducibility); (2) authenticating a connection gives Membrane access to your Mamo Business data (the CLI proxies requests on your behalf), so only connect accounts you trust; (3) the skill itself is instruction-only and won’t automatically install anything — you must run the install steps yourself, so avoid running commands as root unless necessary. If you need stronger guarantees, ask the skill author or project maintainers for a reproducible, pinned release URL and confirm the repository/packaging provenance.Like a lobster shell, security has layers — review code before you run it.
latestvk976jxvgyxzdjyv9xgdxwxdvq9843jm5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.