Shortpixel
v1.0.2ShortPixel integration. Manage data, records, and automate workflows. Use when the user wants to interact with ShortPixel data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares itself as a ShortPixel integration and its SKILL.md consistently describes using Membrane to connect to ShortPixel. Minor mismatch: the top-level registry metadata lists no required binaries or account, but the SKILL.md explicitly requires network access, a Membrane account, and installation or use of the @membranehq/cli. Functionally, those requirements make sense for the stated purpose.
Instruction Scope
The instructions are narrowly scoped to installing/using the Membrane CLI, creating a connection, listing actions, running actions, and proxying requests to the ShortPixel API via Membrane. There is no instruction to read unrelated local files, require unrelated credentials, or exfiltrate data outside of Membrane/ShortPixel paths.
Install Mechanism
No install spec is present in the registry (skill is instruction-only), but the SKILL.md asks the user to run `npm install -g @membranehq/cli` (or use npx). Installing a public npm CLI globally is a standard mechanism but has the normal moderate risk of any third-party global npm package; the package source (@membranehq/cli) is a public npm package rather than an opaque download URL.
Credentials
The skill does not request any environment variables or local credentials. It explicitly instructs to let Membrane manage ShortPixel credentials instead of asking the user for API keys, which is proportionate for a connector workflow.
Persistence & Privilege
always is false and the skill is user-invocable. There is no request to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with other privilege or credential red flags.
Assessment
This skill is an instruction-only integration that expects you to use the Membrane service/CLI to access ShortPixel. Before installing or running commands: (1) confirm the authenticity of the @membranehq/cli package on the npm registry or use `npx` to avoid a global install; (2) be aware the CLI will open a browser for interactive login (or use the headless flow) and that credentials are managed by Membrane’s service, so review Membrane’s privacy/security policy if you care about where API credentials are stored; (3) the skill does not request local API keys or environment variables, but it does require network access and a Membrane account. If you need a fully offline or self-hosted integration, this skill is not suitable.Like a lobster shell, security has layers — review code before you run it.
latestvk975dpxtg71r8069zx7nytsxw9842b5y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.