Segment
v1.0.2Segment integration. Manage Workspaces. Use when the user wants to interact with Segment data.
⭐ 0· 199·1 current·1 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md explains how to manage Segment via the Membrane CLI and proxy. There are no unexpected credentials, unrelated binaries, or unrelated service accesses declared.
Instruction Scope
Instructions focus on installing and using the Membrane CLI to create connections, list actions, run actions, and proxy Segment API calls. They require network access and a Membrane account and advise browser-based auth. The doc explicitly tells the agent not to ask users for API keys. Minor mismatch: the manifest doesn't declare the membrane CLI as a required binary even though the runtime instructions assume it is installed.
Install Mechanism
This is an instruction-only skill with no install spec. The SKILL.md recommends installing @membranehq/cli via npm (global install). That is a typical but moderate-risk user action (external npm package). The skill itself does not automatically download or execute code.
Credentials
No environment variables, credentials, or config paths are requested. SKILL.md delegates auth to Membrane and explicitly says not to ask users for API keys, which is proportionate for the described functionality.
Persistence & Privilege
Skill is not always-on and does not request special platform privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other concerning factors.
Assessment
This skill is an instruction-only integration that expects you to install and use the Membrane CLI (npm install -g @membranehq/cli) and to have a Membrane account. Before proceeding: verify you trust the @membranehq/cli npm package and the getmembrane.com / GitHub project; confirm what Segment permissions the Membrane connection will request during browser auth; avoid pasting Segment API keys locally (the guide says Membrane manages credentials server-side); and if you don't want global npm installs, install the CLI in a virtual environment or container instead. The manifest omits declaring the CLI as a required binary—make sure the runtime environment provides it.Like a lobster shell, security has layers — review code before you run it.
latestvk976enqzms7mpwhttm5dvcvev5843nr6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.