Pendo
v1.0.2Pendo integration. Manage Guides, Segments, Pages, Features, Feedbacks, Polls. Use when the user wants to interact with Pendo data.
⭐ 0· 133·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (Pendo integration) align with the instructions: all actions are routed through the Membrane CLI and Membrane connectors to manage Guides, Segments, Pages, Features, Feedbacks, etc. Requested capabilities (network + Membrane account) are expected for this purpose.
Instruction Scope
SKILL.md instructs the agent/user to install and use the Membrane CLI, create connections, list actions, run actions, or proxy raw Pendo API calls through Membrane. It does not ask the agent to read unrelated files, environment variables, or system secrets; authentication is handled via an interactive browser flow.
Install Mechanism
This is an instruction-only skill (no install spec in registry). It recommends installing @membranehq/cli via npm (global install) or using npx. Installing a third-party CLI from npm is a typical but non-trivial action — it's not part of the skill bundle, so the user will perform it. Consider using npx to avoid global installs on shared machines.
Credentials
The skill declares no required env vars or secrets and explicitly advises against asking users for API keys, relying on Membrane to manage auth server-side. That is proportionate to the stated functionality. Note: using Membrane means your Pendo credentials will be stored/managed by the Membrane service (expected behavior).
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It does not attempt to modify other skills or system configuration in the instructions.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to access Pendo via Membrane connectors and does not ask for unrelated credentials. Before installing: (1) confirm you trust Membrane (getmembrane.com) because it will hold/refresh your Pendo credentials and proxy requests to Pendo; (2) prefer npx or a per-project install if you don't want a global npm package on shared systems; (3) be prepared for an interactive browser login flow that grants the connector access to your Pendo account; and (4) review the Membrane connector permissions and any data that will be sent to Membrane if you have privacy or compliance concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk97820ysjsppsb48vbdbhwmmq5842917
License
MIT-0
Free to use, modify, and redistribute. No attribution required.