Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Parser Expert
v1.0.0Parser Expert integration. Manage data, records, and automate workflows. Use when the user wants to interact with Parser Expert data.
⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md describes integrating with Parser Expert via the Membrane CLI, which is a reasonable, direct way to implement this capability. The skill declares network access and a Membrane account which aligns with the described functionality.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing browser-based login, discovering connectors/actions, running actions, and proxying requests through Membrane. The instructions do not ask the agent to read local user files, environment variables, or system configuration unrelated to the integration.
Install Mechanism
The registry has no formal install spec, but SKILL.md tells users to install @membranehq/cli via npm -g (or run via npx). Installing a public npm CLI globally is a common approach but writes to disk and executes third‑party code; using npx (documented in the skill) avoids a global install and reduces persistence. This is moderate-risk but expected for a CLI-based integration.
Credentials
The skill requests no environment variables or local credentials. Authentication is handled via Membrane's browser-based flow and server-side token management, which matches the guidance in SKILL.md (it explicitly warns not to ask for API keys). No disproportionate secret access is requested.
Persistence & Privilege
always is false and the skill is instruction-only (no code files). It does not request persistent platform privileges or claim to modify other skills or system-wide configuration.
Assessment
This skill is internally consistent: it instructs you to install/use the Membrane CLI to connect to Parser Expert and does not ask for unrelated secrets. Before installing, confirm you trust Membrane (review getmembrane.com, the CLI package publisher, and privacy/security docs). If you prefer to avoid a global npm install, use the documented npx commands. Be mindful that the CLI will open a browser-based login and that connectors you authorize can access data in Parser Expert — grant only the minimum necessary scope and avoid running the CLI on machines with sensitive data unless you trust the connector and environment. If you want stronger assurance, ask the publisher for a signed release URL or an official package page and verify the GitHub repository cited in the SKILL.md.Like a lobster shell, security has layers — review code before you run it.
latestvk975vnsewng7xpg6pf297ev4j9844ek9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.