Podium
v1.0.2Podium integration. Manage data, records, and automate workflows. Use when the user wants to interact with Podium data.
⭐ 0· 80·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Podium integration) align with the runtime instructions: all actions are routed through the Membrane CLI and Membrane's Podium connector. The repository/homepage references Membrane and Podium docs, and no unrelated credentials or tools are requested.
Instruction Scope
Instructions focus on installing and using the Membrane CLI to create connections, list/run actions, and proxy arbitrary Podium API requests. This is within the stated purpose, but note that 'membrane request' enables arbitrary proxied API calls to Podium once a connection exists — which grants broad access to Podium data and actions depending on the OAuth scopes granted during connection setup.
Install Mechanism
This is an instruction-only skill (no install spec). It tells users to run 'npm install -g @membranehq/cli' (or use npx). Using npm to install a global CLI is expected but has operational implications (requires npm/node, may need elevated permissions on some systems). No downloads from untrusted URLs or extraction steps are recommended in the skill itself.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for API keys (Membrane handles auth). That is proportionate: Podium access is achieved via Membrane's connector and interactive OAuth flow rather than direct credential injection.
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable. However, because it instructs use of a CLI that can proxy arbitrary API requests, an agent invoking this skill (autonomously) could perform a wide range of Podium actions within the permissions of the connected account. Consider the privilege scope of the Membrane connection created.
Assessment
This skill appears to do what it says: it requires installing the official Membrane CLI and using Membrane-managed OAuth connections to Podium. Before installing or using it: (1) confirm you trust Membrane/@membranehq and the specified CLI package; (2) prefer using npx or a local install if you want to avoid a global npm install; (3) when you perform the 'membrane connect' OAuth flow, review and limit the scopes/permissions granted to the connection (use least privilege); (4) be aware that once a connection exists, the CLI's 'membrane request' can send arbitrary proxied API calls to Podium — only grant account access you are comfortable with and monitor activity; (5) verify the upstream repository or vendor documentation if you need higher assurance. Overall the skill is internally consistent and coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97dbq53r73whkenm1qswyc56h8437g3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.