Membervault
v1.0.2Membervault integration. Manage Courses, Bundles, Members, Tags, Products, Offers and more. Use when the user wants to interact with Membervault data.
⭐ 0· 97·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description (Membervault integration) match the instructions which use Membrane to connect to Membervault. The skill explicitly requires a Membrane account and network access — which is coherent for a proxy-based integration.
Instruction Scope
SKILL.md only instructs installing and using the @membranehq/cli, creating connections, listing actions, running actions, and proxying requests to Membervault. It does not instruct reading unrelated local files, environment variables, or sending data to unexpected endpoints.
Install Mechanism
This is instruction-only (no automatic installer), but it tells the user to run `npm install -g @membranehq/cli`. Installing a global npm package is normal for a CLI but introduces the usual supply-chain considerations (trust/reputation of the npm package, global install permissions). The skill does not include any download URLs or archives itself.
Credentials
No environment variables, credentials, or config paths are requested by the skill. Authentication is delegated to Membrane's browser login flow, and the doc explicitly advises not to ask users for API keys or tokens.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request to modify other skills or system-wide settings. Autonomous invocation is allowed but is the platform default and not combined with other concerning privileges here.
Assessment
This skill is coherent: it instructs you to install and use the Membrane CLI to access Membervault. Before installing, verify the @membranehq/cli package on the npm registry (publisher, downloads, repo) and confirm the getmembrane.com / Membrane service is the intended proxy. Installing the CLI globally requires local permissions — if you prefer to reduce footprint, run it in a controlled environment (container or VM) or use npx for ephemeral invocation. The skill delegates auth to Membrane via a browser flow and does not ask for local API keys, but only use it if you trust Membrane to manage your Membervault credentials. If you plan to let an agent run commands autonomously, be aware those commands will use your Membrane connection to access Membervault data; only enable autonomous use if you trust the agent's actions.Like a lobster shell, security has layers — review code before you run it.
latestvk972dj1kxbbef09sw5naqza7rn843yqk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.