Sellercloud
v1.0.2Sellercloud integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sellercloud data.
⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the instructions: the skill tells the agent to use Membrane to interact with Sellercloud (connections, actions, proxy requests). Nothing requested (no env vars, no unrelated binaries) is inconsistent with an integration via Membrane.
Instruction Scope
SKILL.md stays on-topic (use membrane CLI to connect, list actions, run actions, and proxy requests to Sellercloud). It does not instruct reading arbitrary files or exfiltrating data. Minor inconsistency: the instructions assume npm is available (they tell the user to run `npm install -g @membranehq/cli`) but the skill metadata's required-binaries list is empty; the registry metadata could have declared `npm` or `node` as required.
Install Mechanism
This is an instruction-only skill with no install spec in the registry; it recommends installing the official-looking Membrane CLI via npm (`@membranehq/cli`). Installing a global npm package is a normal way to get a CLI but carries the usual npm risks (the package runs code on install). The SKILL.md points to a public npm package and the project's GitHub repo; there are no obscure download URLs or archive extraction steps.
Credentials
The skill requests no environment variables or credentials and explicitly advises letting Membrane manage credentials and not asking users for API keys. That is proportionate for a connector that delegates auth to a third-party service.
Persistence & Privilege
The skill is not always-on (always: false) and does not request persistent system-wide privileges or modify other skills. Autonomous model invocation is allowed but that is the platform default and not, by itself, a concern here.
Assessment
This skill appears to be what it says: a Sellercloud integration that uses Membrane. Before installing, verify you trust the Membrane CLI (@membranehq/cli on npm) and the linked GitHub repo; installing a global npm package executes code on your machine, so prefer installing in a controlled environment or verifying the package's integrity. You should also confirm your organization's policy for granting third-party services (Membrane) access to Sellercloud data and review the Membrane privacy/security docs. If the SKILL.md started asking for API keys, reading local files, or instructing downloads from nonstandard URLs, that would be a red flag.Like a lobster shell, security has layers — review code before you run it.
latestvk974z34x5yzgmb9d9qe5st1njh842yb5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.