ClawHub

Signiflow

v1.0.0

SigniFlow integration. Manage data, records, and automate workflows. Use when the user wants to interact with SigniFlow data.

⭐ 0· 49·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the runtime instructions: the SKILL.md exclusively instructs the agent/user to use the Membrane CLI to connect to and operate on SigniFlow data. No unrelated credentials, binaries, or capabilities are requested.
✓
Instruction Scope
Instructions only cover installing/using the Membrane CLI, authenticating via browser, discovering connectors/actions, running actions, and proxying requests to SigniFlow through Membrane. There are no instructions to read unrelated files, exfiltrate environment variables, or modify other system configuration.
ℹ
Install Mechanism
There is no packaged install spec in the registry, but SKILL.md tells users to run `npm install -g @membranehq/cli` (or use npx in examples). Installing an npm CLI runs code on the host (moderate risk) — this is expected for a CLI-based integration, but you should verify the package and source before installing.
✓
Credentials
The skill declares no required env vars or credentials. The instructions explicitly rely on Membrane to manage SigniFlow credentials (and advise not asking users for API keys), which is proportionate to the described purpose.
✓
Persistence & Privilege
The skill is not always-enabled and does not request system-wide persistence or modification of other skills. Autonomous model invocation is allowed (platform default) but not combined with other high-risk factors here.
Assessment
This skill appears coherent: it delegates auth and API calls to the Membrane CLI and does not request unrelated secrets. Before installing or running it, verify the Membrane CLI package (@membranehq/cli) and its repository (check the npm page and GitHub source), prefer using `npx` or a contained environment if you don't want a global install, and confirm you trust the Membrane service and its permissions for your SigniFlow account. Avoid pasting SigniFlow API keys into chat and follow the skill's advice to use the Membrane connection flow for authentication.

Like a lobster shell, security has layers — review code before you run it.

latestvk976zjjyg319wp7shhpc9aejnx84ebfm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments