Salespype
v1.0.2Salespype integration. Manage Organizations. Use when the user wants to interact with Salespype data.
⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Salespype integration) matches the instructions: all runtime steps are about using the Membrane CLI to connect to a Salespype connector and run/proxy API actions. No unrelated credentials, binaries, or system access are requested.
Instruction Scope
SKILL.md only instructs installing and using the @membranehq/cli (login, connect, action list/run, request). It does not instruct reading unrelated files or exfiltrating data to unknown endpoints. The guidance to use Membrane's proxy and browser-based login is within the integration's scope.
Install Mechanism
The skill is instruction-only (no install spec), but it tells the user to globally install an npm CLI package (@membranehq/cli) or use npx. Installing a global npm package is a reasonable, expected step for a CLI-based integration but is a moderate-risk action in general—users should ensure they trust the package and its publisher.
Credentials
The skill requests no environment variables or extra credentials itself; authentication is delegated to the Membrane CLI. This is proportionate to its stated purpose. Note: the Membrane CLI will manage and store auth tokens locally as part of normal CLI behavior.
Persistence & Privilege
The skill is not always-enabled and does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) and not combined with other concerning factors here.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found nothing to analyze because this is an instruction-only skill with no code files; that's expected. Absence of findings here is not evidence of additional safety beyond the coherence of the instructions.
Assessment
This skill is coherent: it instructs using the Membrane CLI to interact with Salespype. Before installing/using it, verify you trust Membrane (@membranehq) and the homepage/repo referenced, and confirm the connector/service domain is correct (I noticed a minor name mismatch in the docs — double-check you're targeting the intended Salespype/Salespipe API). Installing a global npm CLI requires write access to your system—consider using npx or a pinned version instead of an unpinned global install. Remember the Membrane CLI will store auth tokens locally; if you have sensitive data policies, review where the CLI stores credentials and what scopes the connector requests.Like a lobster shell, security has layers — review code before you run it.
latestvk97c9x8xmd5ekv7zwx5hrzvjv18429xx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.