Memberful
v1.0.2Memberful integration. Manage Members, Plans, Products, Discounts. Use when the user wants to interact with Memberful data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description indicate Memberful integration and the SKILL.md consistently uses the Membrane CLI as a proxy to access Memberful APIs. Requested capabilities (network access, Membrane account, Membrane CLI) are proportional to the stated purpose.
Instruction Scope
All runtime steps are limited to installing/using the Membrane CLI, creating/listing connections, discovering and running actions, and proxying requests to Memberful. The README explicitly tells the agent not to ask for Memberful API keys. Note: the instructions do recommend installing and running a third-party CLI and allow arbitrary proxy requests to Memberful endpoints (which is expected for this integration).
Install Mechanism
The skill is instruction-only (no install spec), but it instructs the user/agent to install @membranehq/cli via npm (global install or npx). This is reasonable for the task but introduces the usual trust considerations for third-party npm packages (verify package publisher and integrity before global install).
Credentials
The skill declares no required environment variables or credentials and advises using Membrane-managed connections so the agent does not request API keys. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence or modify other skills' settings, and allows normal autonomous invocation only when the agent is permitted to use it.
Assessment
This skill appears coherent and limited to using the Membrane CLI to talk to Memberful. Before installing/using it: (1) verify you trust the @membranehq npm package (installing global npm packages runs third-party code); (2) understand that Membrane acts as a proxy and will see API requests/responses (so review privacy/terms for Membrane); (3) prefer npx or a scoped install if you don't want a global binary; and (4) avoid pasting unrelated secrets into prompts — the skill does not require Memberful API keys because Membrane handles auth server-side.Like a lobster shell, security has layers — review code before you run it.
latestvk97bpwyt7nx0e87bq054djc4v5842y0f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.