ClawHub

Reputation Lyncs

v1.0.2

Reputation Lyncs integration. Manage data, records, and automate workflows. Use when the user wants to interact with Reputation Lyncs data.

⭐ 0· 76·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill describes a Reputation Lyncs integration that operates via the Membrane CLI — that matches the described capability. Minor mismatch: the registry metadata lists no required binaries, but the SKILL.md instructs installing the @membranehq/cli (via npm) and implies the CLI executable 'membrane' will be used; the runtime environment therefore needs node/npm and the CLI available even though those binaries are not declared in the registry.
✓
Instruction Scope
SKILL.md instructs only how to install/use the Membrane CLI, create connections, list actions, run actions, and proxy requests to Reputation Lyncs. It does not instruct reading unrelated files or environment variables, nor transmitting data to unexpected endpoints. Note: the proxy capability allows arbitrary API requests to be forwarded through Membrane — this is expected for an integration but means the skill (via the CLI) can call any endpoint on the target API.
ℹ
Install Mechanism
There is no automated install spec (instruction-only), which is lower risk. The user is told to run 'npm install -g @membranehq/cli' (a public npm package). Installing a global npm package is a normal, moderate-risk action — verify the package and provider before installing.
✓
Credentials
The skill requests no environment variables or credentials and explicitly instructs not to ask users for API keys, delegating auth to Membrane. That is proportionate: a Membrane account and browser-based login are required, which the docs mention.
✓
Persistence & Privilege
The skill is not always-enabled and has no install-time persistence. It does not request system-wide configuration changes or access to other skills' credentials. Autonomous invocation is allowed by default but is not, by itself, a red flag here.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to connect to Reputation Lyncs and proxy API calls. Before installing/using it: (1) ensure you trust Membrane (https://getmembrane.com) because API requests and credentials will be routed through their service; (2) be prepared to install a global npm package and have node/npm available; (3) expect a browser-based login flow that grants Membrane access to the target account; (4) verify connector IDs and action schemas returned by 'membrane action list' before running actions that modify data. If you need to avoid third-party proxies for privacy or compliance reasons, do not use this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk9705r6ytcvhryyk2zdzt4nhms8421dj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments