Pointerpro
v1.0.2Pointerpro integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Pointerpro data.
⭐ 0· 103·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes a Pointerpro integration implemented via the Membrane CLI, which matches the skill name/description. One minor mismatch: the registry metadata lists no required binaries, yet the runtime instructions explicitly require installing the Membrane CLI (npm install -g @membranehq/cli) or using npx. This is an inconsistent metadata omission but functionally sensible for the described purpose.
Instruction Scope
All instructions stay within the stated purpose: discovering connectors/actions, running actions, and proxying direct Pointerpro API requests through Membrane. The skill directs network calls to Membrane (which will forward to Pointerpro) and does not instruct reading unrelated local files or environment variables. It advises not to ask users for API keys and to use Membrane-managed connections.
Install Mechanism
There is no platform install spec in registry (instruction-only), but SKILL.md asks the user to install the @membranehq/cli npm package (global install) or use npx. Installation via npm registry is common and not inherently suspicious, but a global npm install writes binaries to disk and requires developer/trust judgment. No obscure URLs or archive downloads are used.
Credentials
The skill requests no environment variables or credentials and explicitly delegates authentication to Membrane. That is proportionate to the purpose. Users should note that authentication and proxied requests are handled by Membrane (server-side), so sensitive Pointerpro data will transit/appear in Membrane's systems.
Persistence & Privilege
The skill is not always-enabled, does not request elevated platform privileges, and does not modify other skills' configurations. It is an instruction-only skill and does not create persistent on-disk components beyond what the user installs (the CLI).
Assessment
This skill is coherent but requires trusting Membrane (https://getmembrane.com) because all Pointerpro API calls and credentials are proxied through their service. Before installing: (1) review Membrane's privacy/security docs to verify how they store/handle tokens and request payloads; (2) prefer using npx @membranehq/cli@latest to avoid a global npm install, or sandbox the install; (3) be aware that running membrane login will open a browser and create credentials (local or server-side) — confirm where those tokens are stored; (4) verify actions and connection IDs returned by membrane before running destructive actions; and (5) avoid giving other unrelated credentials to this skill. The only metadata inconsistency is the registry not listing the Membrane CLI as a required binary — that is explainable but worth noting.Like a lobster shell, security has layers — review code before you run it.
latestvk976qdpce6qb6peyqs4cpxssg5842wd7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.