Sare
v1.0.0SARE integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with SARE data.
⭐ 0· 83·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description state a SARE integration and the SKILL.md instructs the agent to use the Membrane CLI and a Membrane account to connect to SARE. There are no unrelated credentials, binaries, or actions requested.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI, discovering actions, and proxying requests to SARE via Membrane. One important note: proxied requests and authentication are routed through Membrane's service, so SARE data and tokens will transit/ be stored by Membrane — the doc explicitly states this. There are no instructions to read unrelated local files or environment variables.
Install Mechanism
The skill has no automated install spec (instruction-only). It tells users to install @membranehq/cli globally via npm (-g) or use npx. This is expected for a CLI-based integration but installing global npm packages and running a third-party CLI has the usual operational risks; the skill does not itself download arbitrary code.
Credentials
No environment variables, credentials, or config paths are required by the skill itself. The SKILL.md deliberately instructs not to ask users for SARE API keys and to rely on Membrane for auth, which is proportionate to the stated purpose.
Persistence & Privilege
The skill is instruction-only, does not request permanent presence (always: false), and does not modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but is not combined with other concerning privileges.
Assessment
This skill is coherent and appears to do what it claims, but note these practical points before using it: (1) it requires a Membrane account and the Membrane service will proxy and handle SARE authentication — your SARE data and tokens will transit/ be stored by Membrane, so verify their privacy/security posture and trustworthiness; (2) the SKILL.md asks you to install @membranehq/cli globally via npm (-g) or run via npx — installing global packages executes third-party code, so prefer npx or review the package if you have supply-chain concerns; (3) the skill does not ask you to provide raw API keys (it advises against this), which is good practice; and (4) if you need higher assurance, check Membrane's documentation and the connector implementation (or request the connector's source) so you can audit what data is proxied. If any of these points are unacceptable, do not install or use the integration.Like a lobster shell, security has layers — review code before you run it.
latestvk97bkf5dt7e03byyqmh2mjb3s583jk57
License
MIT-0
Free to use, modify, and redistribute. No attribution required.