Pointagram
v1.0.2Pointagram integration. Manage Organizations, Users. Use when the user wants to interact with Pointagram data.
⭐ 0· 101·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Pointagram integration) match the instructions, which use Membrane to manage connections, run actions, and proxy requests to Pointagram. Minor mismatch: the registry declares no required binaries, but the SKILL.md instructs installing the @membranehq/cli npm package (expected for this integration).
Instruction Scope
SKILL.md confines itself to installing/using the Membrane CLI, logging in, creating connections, listing actions, running actions, and/or proxying requests to the Pointagram API. It does not instruct the agent to read arbitrary local files or environment variables, nor to exfiltrate data beyond the expected Membrane proxy.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the docs ask the user to install the Membrane CLI via npm (npm install -g @membranehq/cli) or use npx in examples. Installing a package from npm is a common moderate-risk install step; no obscure download URLs or archive extraction are used.
Credentials
The skill declares no environment variables or credentials and instructs users to create a Membrane connection (OAuth/browser flow). This is proportionate: Membrane is intended to manage credentials server-side, and the SKILL.md explicitly advises against asking users for API keys.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request system-wide persistence or modify other skills' config. Normal autonomous invocation is permitted by platform defaults but does not create additional privileges.
Assessment
This skill is instruction-only and relies on the Membrane CLI/service to talk to Pointagram. Before installing or using it: verify you trust Membrane (@membranehq) and the linked homepage/docs; prefer using npx or inspecting the npm package before a global npm install; understand that connecting will grant Membrane access to your Pointagram account (OAuth/browser flow) so review the permissions and consider using a test account or scoped credentials; no local environment variables or secrets are requested by the skill itself, but the Membrane service will hold your connection credentials — review its privacy/security docs. The absence of code files means the only local code executed will be the Membrane CLI you install, so vet that package separately.Like a lobster shell, security has layers — review code before you run it.
latestvk973pe6k6hy6hehb83v7rr9pcn842tn6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.