Matterport
v1.0.2Matterport integration. Manage Spaces. Use when the user wants to interact with Matterport data.
⭐ 0· 136·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes a Matterport integration and all runtime instructions center on using the Membrane CLI to connect to Matterport and run actions — requiring a Membrane account and network access, which is consistent.
Instruction Scope
SKILL.md instructs the agent/user to install and run the Membrane CLI, create connections, list actions, run actions, and proxy requests. It does not instruct reading unrelated files, environment variables, or sending data to endpoints outside Membrane/Matterport.
Install Mechanism
There is no automated install spec in the skill bundle (instruction-only). The guide tells users to run `npm install -g @membranehq/cli` (and uses npx elsewhere). Installing a third-party global npm package is a user action and carries the usual trust considerations for npm packages; this is expected for a CLI-based integration but is the primary install-related risk.
Credentials
The skill requests no environment variables or local credentials and explicitly advises relying on Membrane to manage auth. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill is not always-enabled, does not request autonomous elevation, and is instruction-only (no code written to disk by the skill itself). Normal autonomous invocation by the agent is allowed but not excessive here.
Assessment
This skill is internally consistent: it expects you to install and use the Membrane CLI to manage Matterport connections and actions. Before installing the CLI, verify the @membranehq/cli npm package and its GitHub repository (check maintainers, recent releases, and source code) and only install if you trust that publisher. Remember that the CLI will act with whatever permissions your Membrane account grants (it can proxy requests to Matterport and other APIs), so use an account with appropriate scope and avoid giving it access to sensitive resources you don't want managed through Membrane. If you prefer not to install global npm packages, you can use npx or inspect the package source first.Like a lobster shell, security has layers — review code before you run it.
latestvk97139y70dgpnf2vx8dqqtrj6d8433eh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.