ClawHub

Salestown

v1.0.2

Salestown integration. Manage data, records, and automate workflows. Use when the user wants to interact with Salestown data.

⭐ 0· 108·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md describes using the Membrane CLI to connect to Salestown and operate on records. Required capabilities (network access, Membrane account, CLI) are proportionate to that purpose.
✓
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in via browser, creating/listing connections, listing and running actions, and proxying API requests via Membrane. The docs do not instruct reading unrelated files, exporting unrelated credentials, or exfiltrating data to unknown endpoints.
ℹ
Install Mechanism
There is no install spec in the skill bundle; the SKILL.md recommends installing @membranehq/cli from npm (npm install -g or npx). Using npm is expected for a CLI but introduces the usual supply-chain considerations: verify the package name, publisher, and consider using npx (or pinned version) instead of a global install.
✓
Credentials
The skill declares no required environment variables or credentials. The instructions explicitly direct the user to create a connection through Membrane rather than providing API keys locally. This is proportionate, but it requires trust in Membrane's hosted service for auth and data proxying.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills. Autonomous invocation is allowed by default (disable-model-invocation is false), which is normal for skills and acceptable here given the limited scope.
Assessment
This skill is coherent but depends on the third-party service 'Membrane' to handle auth and proxy Salestown API calls. Before installing/using: verify the npm package (@membranehq/cli) and its publisher, review Membrane's privacy/security docs and your org's policy (you will be delegating Salestown credentials/session handling to Membrane), consider using npx or a pinned CLI version rather than a global install, and test in a non-production account first. If you are uncomfortable delegating auth to a hosted proxy, do not use the skill or restrict the agent's autonomous invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cpafgx49b2h1kyznwgpat618423az

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments