Newscatcher
v1.0.2NewsCatcher integration. Manage Topics. Use when the user wants to interact with NewsCatcher data.
⭐ 0· 112·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (NewsCatcher integration) matches the runtime instructions: installing/using the Membrane CLI, creating a NewsCatcher connection, listing actions, running actions, and optionally proxying requests to the NewsCatcher API. Nothing requested (no env vars, no unrelated binaries) is disproportionate to that purpose.
Instruction Scope
Instructions are focused on using the Membrane CLI and managing connections/actions. They require logging into a Membrane account (browser-based auth) and allow using `membrane request CONNECTION_ID /path` to proxy arbitrary endpoints on the connected service. This is expected for a proxy-style integration, but it does give the operator the ability to send arbitrary requests through the connection, so confirm the connection ID actually refers to NewsCatcher and avoid reusing connectors with broader privileges.
Install Mechanism
The skill is instruction-only (no install spec). It recommends installing @membranehq/cli via npm (-g). That is a reasonable, common instruction but does involve pulling a package from the npm registry and installing a global binary; users on locked-down systems should review the package source before installing.
Credentials
No environment variables or credentials are requested by the skill. The SKILL.md explicitly advises against asking users for API keys and delegates auth to Membrane, which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not modify other skills or system-wide settings in the instructions. Normal autonomous invocation remains possible (platform default) but is not a red flag by itself here.
Assessment
This skill looks coherent: it uses the Membrane CLI to manage a NewsCatcher connector and does not ask for API keys. Before installing or using it, (1) verify you trust the @membranehq/cli package source (npm) if you plan to install it globally, (2) ensure the connection ID you create or use is the NewsCatcher connector (so proxy requests target NewsCatcher only), and (3) be aware the skill requires you to authenticate to your Membrane account in a browser, which grants Membrane access to manage that connector. If you are concerned about autonomous agent actions, limit the agent's permissions or require explicit approval before running CLI commands.Like a lobster shell, security has layers — review code before you run it.
latestvk970gn4w6vk8p96vbcjhgeb5y5842fk0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.