Picky Assist
v1.0.2Picky Assist integration. Manage data, records, and automate workflows. Use when the user wants to interact with Picky Assist data.
⭐ 0· 89·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the skill uses the Membrane CLI to manage Picky Assist data. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md directs the agent/user to install and run the Membrane CLI, authenticate via browser, create/list connections, run actions, and proxy requests to Picky Assist. All steps are within the stated integration purpose and do not instruct the agent to read unrelated files or secrets.
Install Mechanism
There is no automated install spec in the bundle; SKILL.md recommends installing the public @membranehq/cli via npm (or using npx). This is a common, expected approach and does not attempt to download arbitrary archives or run unknown installers.
Credentials
The skill declares no required environment variables or credentials and explicitly tells you not to ask the user for API keys. Authentication is handled by Membrane's browser login flow, which is proportional to the task.
Persistence & Privilege
The skill is not always-enabled and requests no elevated agent-wide privileges. It does not modify other skills or system-wide configurations in its instructions.
Assessment
This skill is instruction-only and delegates auth and API calls to the Membrane service. Before installing/using it, verify you trust Membrane (https://getmembrane.com and the referenced GitHub repo) because the Membrane account and its connections will be granted access to your Picky Assist data. Installing the CLI uses a public npm package (@membranehq/cli); running the browser login will create tokens/session state handled by Membrane and potentially stored locally by the CLI. If you are uncomfortable granting an external service that access, avoid installing the CLI or perform actions manually. Also prefer using npx (as the docs show) if you want to avoid a persistent global npm install. Finally, note this skill bundle contains only instructions (no code files), so static scanners had nothing to analyze — trust decisions rely on the third-party Membrane service and your own policies about granting access.Like a lobster shell, security has layers — review code before you run it.
latestvk974y6z7av9vadn8bjftm5dr0h843z51
License
MIT-0
Free to use, modify, and redistribute. No attribution required.