Proofpoint
v1.0.0Proofpoint integration. Manage data, records, and automate workflows. Use when the user wants to interact with Proofpoint data.
⭐ 0· 69·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a Proofpoint integration and the SKILL.md consistently instructs using the Membrane CLI to connect, run actions, and proxy requests to Proofpoint. Required auth is handled by Membrane, which matches the stated design.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing login via browser/headless flow, listing/connecting actions, running actions, and proxying requests. The instructions do not ask the agent to read unrelated files, exfiltrate data, or access system credentials.
Install Mechanism
There is no install spec in the registry (instruction-only). The SKILL.md recommends installing @membranehq/cli via npm (global install). Using npm is typical for a CLI but installing global packages requires elevated permissions and pulls code from the npm registry—verify the package source before installing.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for Proofpoint API keys, relying on Membrane-managed connections. The requested access is proportional to the stated functionality.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent system-wide configuration or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill is coherent: it delegates Proofpoint access to the Membrane CLI and does not ask for unrelated credentials. Before installing/using it, verify you trust the @membranehq/cli npm package and the Membrane service (browser login will grant them connection access). Installing the CLI globally may require admin rights; consider using npx or a user-local install if you prefer. As always, avoid pasting secrets into chat prompts — the skill intends you to create a connection through Membrane rather than supplying raw API keys.Like a lobster shell, security has layers — review code before you run it.
latestvk972rwccz241qgk21cyqtn63sn8442rt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.