Signaturely
v1.0.2Signaturely integration. Manage Documents, Users, Teams. Use when the user wants to interact with Signaturely data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Signaturely integration' and the SKILL.md only requires the Membrane CLI and a Membrane account to create connections and proxy requests to Signaturely — these are coherent and expected for this purpose.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging into Membrane, creating connections, listing/running actions, and proxying requests to Signaturely. There are no instructions to read unrelated files, request unrelated credentials, or transmit data to unexpected endpoints.
Install Mechanism
This is instruction-only (no bundled install). It directs users to install @membranehq/cli from npm (global install or npx). That is expected for a CLI-based integration but carries the usual considerations of installing a third‑party npm package globally — verify the package and its publisher on npm/GitHub before installing.
Credentials
The skill does not request environment variables or secrets. It explicitly advises against asking users for API keys and relies on Membrane to manage credentials server‑side, which is proportionate to the stated goal.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It contains no code that would modify other skills or system settings. The only persistence comes from normal Membrane login/connection state, which is expected for this integration.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to Signaturely and requests no local secrets. Before installing, verify the @membranehq/cli package and the Membrane service (npm page and GitHub repo), and ensure you trust Membrane to hold your Signaturely credentials. Note that installing the CLI globally (npm install -g) modifies your system environment and requires appropriate privileges — use npx if you prefer not to perform a global install. If you plan to allow autonomous skill invocation, remember the skill can run the CLI and make network requests via your Membrane connection, so only enable that if you trust the integration.Like a lobster shell, security has layers — review code before you run it.
latestvk975gk8v1r86ng18kvt87gvz4s8429hq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.