Shipday
v1.0.2Shipday integration. Manage Accounts. Use when the user wants to interact with Shipday data.
⭐ 0· 124·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the skill is an integration helper that instructs the agent to use the Membrane CLI to access Shipday. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md stays on-topic: it guides installing and using @membranehq/cli, creating a connection, listing actions, running actions, and proxying requests. It does not instruct reading unrelated files, harvesting environment variables, or sending data to unexpected endpoints.
Install Mechanism
No formal install spec is included, but the instructions tell users to run `npm install -g @membranehq/cli`. Installing a global npm package is common but carries the usual risks of executing third-party code — verify the package/source before installing.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for API keys, instead using Membrane's browser-based login and server-side auth. Requested access is proportionate.
Persistence & Privilege
Skill is instruction-only, does not request permanent/always-on presence, and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it teaches the agent to use the Membrane CLI to access Shipday. Before installing or following its steps: 1) verify the @membranehq/cli npm package and the Membrane service (getmembrane.com) are from a trusted source and acceptable to you, since a global npm install will run third-party code on your machine; 2) understand auth uses a browser-based login to Membrane (tokens held server-side), so you won't hand Shipday API keys directly to the skill; 3) avoid running the CLI in high-privilege environments until you are comfortable with the package; and 4) if you need higher assurance, inspect the @membranehq/cli source/release and the repository referenced in SKILL.md before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk9775rvp8tvx6bmxzsvq0k5ch1842h6x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.