Plextrac
v1.0.0PlexTrac integration. Manage data, records, and automate workflows. Use when the user wants to interact with PlexTrac data.
⭐ 0· 68·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim PlexTrac integration and the SKILL.md exclusively documents using the Membrane CLI to authenticate, create a PlexTrac connection, list/run actions, and proxy API requests. Required resources match that purpose; there are no unrelated env vars, binaries, or config paths.
Instruction Scope
Runtime instructions are scoped to installing and using the Membrane CLI (login, connect, action list/run, proxy requests). The instructions do not ask the agent to read unrelated files or environment variables, nor to exfiltrate data to third-party endpoints beyond Membrane/PlexTrac. Note: proxying requests through Membrane means request payloads will transit Membrane's service.
Install Mechanism
There is no registry install spec, but SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing a global npm package is a common approach but carries the usual npm risks (code fetched from the registry executed with install privileges). This is proportionate to the described workflow but you should verify the package/source before global install.
Credentials
The skill declares no required environment variables and explicitly instructs not to ask users for PlexTrac API keys (Membrane handles auth). There are no unexplained credential requests.
Persistence & Privilege
The skill is not marked always:true, does not request system-wide config changes, and contains no instructions to modify other skills. Autonomous invocation is allowed (platform default) and is not a red flag by itself.
Assessment
This skill is internally consistent: it uses Membrane as a proxy to reach PlexTrac and asks you to install the @membranehq/cli npm package and authenticate via browser. Before installing, verify the @membranehq/cli package and its GitHub repo (authorship, recent commits, npm publisher), confirm your organization is comfortable routing PlexTrac data through Membrane (Membrane will see proxied requests and tokens), and be aware that `npm install -g` requires elevated filesystem privileges. If you prefer tighter control, consider using a scoped/local install or reviewing Membrane's privacy/security docs and your legal/compliance requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk974rkarhzfh4d11ks3rm3jfpx845gv9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.