ClawHub

Memberstack

v1.0.2

Memberstack integration. Manage Members, Plans, Workspaces. Use when the user wants to interact with Memberstack data.

⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim Memberstack integration and the SKILL.md exclusively instructs using the Membrane CLI to connect to Memberstack, list connections, run actions, and proxy API requests — that is coherent with the stated purpose. No unrelated services, env vars, or binaries are requested.
✓
Instruction Scope
Runtime instructions are narrowly scoped to installing/using the @membranehq/cli, performing web-based login, creating connections, listing actions, running actions, and proxying API calls. The doc does not instruct reading unrelated files, harvesting environment variables, or sending data to unexpected endpoints. It explicitly says not to ask users for API keys and to let Membrane handle auth.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec), but the SKILL.md recommends installing a global npm package: npm install -g @membranehq/cli. That is a normal way to get a CLI, but global npm installs carry the usual supply-chain/trust considerations. The package appears to be scoped (@membranehq) — verify the package and publisher on the npm registry and the linked repository before installing.
✓
Credentials
The skill declares no required environment variables or credentials. Authentication is delegated to Membrane (the SKILL.md advises creating connections and using browser-based login), which is proportionate — but it does mean you are trusting the Membrane service with access and refresh capability for your Memberstack account.
✓
Persistence & Privilege
always:false and default invocation settings; the skill does not request permanent system presence or to modify other skills or global agent settings. No elevated persistence or cross-skill modification is requested.
Assessment
This skill is internally consistent with its stated purpose, but before installing or using it: 1) Verify the Membrane project and the @membranehq/cli package on npm and confirm the GitHub/homepage links (getmembrane.com and the repository referenced in SKILL.md) match a legitimate maintainer. 2) Be aware that signing a connection delegates access and refresh rights to Membrane for your Memberstack account — only connect if you trust that service. 3) Consider installing the CLI in a controlled environment (container, VM, or via npx/local install) rather than globally, and avoid pasting login codes into untrusted prompts. 4) Review the Membrane CLI repository and npm maintainers if you require higher assurance of supply-chain safety.

Like a lobster shell, security has layers — review code before you run it.

latestvk9738g43m49rdscxghyn8sn9298438nj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments