Semaphoreci
v1.0.2Semaphore integration. Manage data, records, and automate workflows. Use when the user wants to interact with Semaphore data.
⭐ 0· 78·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes interacting with Semaphore via Membrane (connecting, listing actions, running actions, and proxying API calls). No unrelated credentials, binaries, or config paths are requested, so the declared purpose matches the required footprint.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, logging in, creating a connector to Semaphore, listing/running actions, and proxying API calls. These steps are appropriate for the stated goal. Note that data and auth flows go through Membrane's servers (the skill explicitly relies on Membrane to handle auth and credential refresh), so Semaphore data will transit a third party.
Install Mechanism
This is an instruction-only skill (no install spec), but the SKILL.md directs users to install @membranehq/cli globally via npm. Using the public npm registry is normal, but global installs require elevated privileges and write to system paths; consider using npx or a user-scoped install if you prefer not to install globally.
Credentials
The skill requests no environment variables or local secrets. Authentication is handled through Membrane's login/connector flow (browser-based OAuth), which is proportionate for a 3rd-party integration. Users should still be aware they are granting Membrane access to Semaphore on their behalf.
Persistence & Privilege
always is false and the skill is user-invocable; autonomous invocation is allowed (platform default). There is no instruction to modify other skills or system-wide agent settings. No unusual persistence or privilege escalation is requested.
Assessment
This skill is coherent: it uses Membrane as a proxy to talk to Semaphore and asks you to install the Membrane CLI and log in via browser. Before installing or using it: (1) verify you trust Membrane (https://getmembrane.com) and review what OAuth scopes/permissions the connector requests, since your Semaphore data and auth tokens will be handled by Membrane; (2) prefer npx or a user-scoped npm install if you want to avoid a global npm install that writes system-wide; (3) avoid using this in highly sensitive environments unless you’ve audited Membrane’s security/privacy practices; and (4) when connecting, review the connector and connection IDs and permissions the browser flow requests. If you need higher assurance, ask the skill author for a package/repo provenance (signed releases or an official org repository) or use Semaphore’s official API/CLI directly instead of a third-party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk977egpk2j5knva4kst2xtr2xd8429zq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.