ClawHub

Saaspass

v1.0.2

SAASPASS integration. Manage data, records, and automate workflows. Use when the user wants to interact with SAASPASS data.

⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim SAASPASS integration and the SKILL.md exclusively documents using Membrane (a third‑party integration layer) to access SAASPASS — requested actions and tooling align with that purpose.
✓
Instruction Scope
Instructions only cover installing and using the Membrane CLI, creating connections, running actions, and proxying requests to SAASPASS. They do not instruct reading unrelated local files, harvesting extraneous environment variables, or exfiltrating data beyond the Membrane proxy workflow.
ℹ
Install Mechanism
This is an instruction‑only skill (no install spec). The instructions tell the user to run `npm install -g @membranehq/cli` — installing a global npm package is reasonable for this integration but does carry the usual trust/attack surface of installing third‑party packages from the npm registry.
✓
Credentials
The skill declares no environment variables or credentials and explicitly recommends letting Membrane handle auth. No disproportionate credential requests are present.
✓
Persistence & Privilege
Skill is user-invocable, not always-enabled, and does not request elevated or persistent agent privileges. Autonomous invocation is allowed (platform default) but not combined with other privilege escalations.
Assessment
This skill is internally consistent: it tells the agent to install and use the Membrane CLI to connect to SAASPASS and does not request local secrets. Before installing, verify you trust the Membrane project and the npm package (@membranehq/cli) because installing a global npm package grants that package runtime presence on your machine. Also note that requests go through Membrane's service (they handle auth and proxy requests), so sensitive SAASPASS data will transit/possibly be processed by Membrane — review their privacy/security docs and your organization's policies before using it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bx8r6hb4ka9bny8cfqx2kx5842dyd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments