ClawHub

Shipcloud

v1.0.2

Shipcloud integration. Manage Shipments, Trackings, Carriers, Services, Labels, Pickups and more. Use when the user wants to interact with Shipcloud data.

⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md shows how to manage Shipcloud via the Membrane CLI and does not request unrelated access (no cloud credentials, no unrelated services).
✓
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, creating connections, listing/running actions, and proxying requests to Shipcloud through Membrane. They do not instruct the agent to read arbitrary local files, exfiltrate data, or access unrelated environment variables.
ℹ
Install Mechanism
Installation is via a public npm package (@membranehq/cli). This is appropriate for a CLI-based integration but installing global npm packages carries the usual supply-chain and privilege considerations—verify the package and publisher before running npm install -g.
✓
Credentials
The skill declares no environment variables or credentials and delegates auth to Membrane (the user authenticates via browser). There are no disproportionate credential requests in SKILL.md.
✓
Persistence & Privilege
Skill is instruction-only, has no install script or always:true flag, and does not request permanent presence or modify other skills or system-wide settings.
Assessment
This skill is coherent: it instructs you to use the Membrane CLI to connect to Shipcloud and does not ask for unrelated secrets. Before installing or running: (1) verify the @membranehq/cli npm package and publisher on npmjs.com and the provided homepage/repository, (2) be aware that installing global npm packages can run code—run in a controlled environment if unsure, (3) understand that authentication is handled by Membrane (you’ll log in via browser) so confirm you trust the Membrane service and its data-handling/privacy practices, and (4) if you prefer not to install the CLI, consider running the same API calls in a constrained environment or review Membrane’s docs for alternatives.

Like a lobster shell, security has layers — review code before you run it.

latestvk972pyp174hxkg8w14pzqw8gps843p95

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments