ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Raygun

v1.0.0

Raygun integration. Manage data, records, and automate workflows. Use when the user wants to interact with Raygun data.

⭐ 0· 28·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description say 'Raygun integration' and the SKILL.md exclusively instructs the agent to install and use the Membrane CLI to authenticate, create a Raygun connection, list actions, run actions, and proxy requests to Raygun. No unrelated credentials, binaries, or system paths are requested.
✓
Instruction Scope
Instructions are scoped to installing the Membrane CLI, logging in, creating/inspecting connections, running actions, and proxying requests. The skill does not ask the agent to read unrelated files, environment variables, or send data to unknown endpoints. It explicitly advises against asking users for API keys and relies on Membrane's managed auth.
ℹ
Install Mechanism
This is an instruction-only skill that tells the user to install @membranehq/cli via 'npm install -g'. Installing a global npm package is expected for a CLI, but carries normal supply-chain and permission considerations (global install requires elevated write access). Using 'npx' is also suggested elsewhere in the doc and is a lower-friction alternative.
✓
Credentials
The skill declares no required environment variables or credentials. It relies on Membrane to handle credentials server-side, which is proportional to the described functionality.
✓
Persistence & Privilege
always is false and the skill is user-invocable. The instructions involve authenticating the CLI in a browser and creating connections via Membrane; nothing indicates it requests persistent platform-wide privileges or modifies other skills' configurations.
Assessment
This skill appears to do what it claims: it uses the Membrane CLI to connect to Raygun and run/proxy API calls. Before installing, consider: (1) verify you trust the @membranehq/cli package source (check the official npm page and the GitHub repo) because installing global npm packages has supply-chain risk; (2) prefer 'npx' or a local install if you want to avoid a global install; (3) understand that Membrane will manage your Raygun credentials server-side—confirm you are comfortable giving Membrane access to the Raygun account you connect; (4) the CLI will open a browser for auth (or print a URL for headless flows); and (5) remove the CLI and revoke connections if you stop using the skill. Overall the skill is coherent and proportional to its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f69j5bsvj3fqcnxzstqjrm58476ta

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments