Memsource
v1.0.0Memsource integration. Manage data, records, and automate workflows. Use when the user wants to interact with Memsource data.
⭐ 0· 54·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is presented as a 'Memsource' integration but its instructions and metadata use the Membrane product (getmembrane.com/@membranehq/cli) as a proxy to Memsource. This is coherent for providing Memsource access via Membrane, but it may surprise users who expect a direct, official Memsource client; the skill therefore depends on a third‑party (Membrane) rather than direct Memsource credentials.
Instruction Scope
SKILL.md stays on purpose: it instructs installing the Membrane CLI, logging in, creating connections, listing and running actions, and optionally proxying raw API requests through Membrane. It does not instruct reading unrelated system files or environment variables or exfiltrating data to unexpected endpoints. It does allow arbitrary proxy requests to the Memsource API via Membrane, which is within its stated purpose but means the agent can access any data available to the Memsource connection.
Install Mechanism
There is no built-in install spec in the skill bundle, but the documentation directs the user to run 'npm install -g @membranehq/cli' (public npm). Installing a global npm package is common, but introduces moderate risk compared to instruction-only: the user must trust the npm package and its publisher and ensure it's obtained from the official registry.
Credentials
The skill requests no environment variables or local credentials and explicitly advises not to ask the user for API keys. However, it relies on a Membrane account/service that will handle authentication server‑side — meaning Memsource data and credentials will be accessible to Membrane's infrastructure. Users should evaluate whether they are comfortable granting that third party access to their translation data.
Persistence & Privilege
The skill is install‑less and instruction‑only, requests no persistent or elevated platform privileges, and is not force‑installed (always: false). It does not instruct modifying other skills or system-wide configuration.
Assessment
This skill uses the Membrane CLI to talk to Memsource, not a direct official Memsource client. Before installing or using it: (1) Confirm you trust the Membrane project and npm package @membranehq/cli (verify publisher, npm page, GitHub repo). (2) Be aware that authentication and API calls are routed through Membrane servers — your Memsource data and tokens will be handled server‑side by that third party. (3) The skill asks you to install a global npm package and to log in via a browser flow; avoid pasting secrets into chat or running unverified installs. (4) If you require direct, auditable access to Memsource without a third party, consider using Memsource's official APIs/clients instead. If any of these items are unacceptable or unclear, do not install or use the skill until you can verify the service and code.Like a lobster shell, security has layers — review code before you run it.
latestvk97cx1g3ytnt5tt0jykj8hjn2984cmnv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.