Request
v1.0.0Request integration. Manage data, records, and automate workflows. Use when the user wants to interact with Request data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description match the instructions: it uses the Membrane CLI to interact with 'Request' data, create connections, run actions, and proxy API calls. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI (login, connect, action list/run, proxy requests). They do not ask the agent to read unrelated files or system state. One minor inconsistency: the SKILL.md lists 'Official docs: https://requests.readthedocs.io/en/latest/' (the Python requests library) which appears unrelated to the 'Request' app; this looks like a documentation error but not malicious behavior.
Install Mechanism
There is no registry install spec; the instructions tell users to install @membranehq/cli via npm (global or via npx). This is a standard public npm package install (moderate risk by nature of installing third-party code), not a direct download from an arbitrary URL.
Credentials
The skill requests no local secrets and explicitly advises against asking users for API keys. It relies on a Membrane account and browser-based login, which is proportionate to a connector/proxy integration. Be aware that authentication and request proxying happen through Membrane's servers — you are delegating credentials and API traffic to that third party.
Persistence & Privilege
The skill is instruction-only, user-invocable, and not always-enabled. It does not request system-wide persistence or modify other skills or agent settings.
Assessment
This skill is coherent: it tells the agent to install and use the Membrane CLI to manage Request data and to let Membrane handle auth. Before installing: (1) verify the @membranehq/cli package on npm/github to ensure it is the official package, (2) confirm you trust Membrane (getmembrane.com) because your API traffic and credentials will be proxied through their service, and (3) note that 'npm install -g' will require elevated permissions on many systems. The SKILL.md contains a likely documentation typo (a link to the Python 'requests' docs) — harmless but worth flagging. If you require on-premise-only handling of credentials or do not want a third party to proxy your requests, do not install this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk976gasvh31ntvb47bnnj9gbed84dswe
License
MIT-0
Free to use, modify, and redistribute. No attribution required.