Simplecast
v1.0.0Simplecast integration. Manage data, records, and automate workflows. Use when the user wants to interact with Simplecast data.
⭐ 0· 56·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (Simplecast integration) match the instructions: all runtime actions use the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to the Simplecast API. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md stays on-task: it instructs installing and using the Membrane CLI, logging in, creating a Simplecast connection, listing actions, running actions, and proxying API requests. It does not tell the agent to read unrelated files, environment variables, or system paths, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
The skill is instruction-only (no automated install spec), but it tells users to run `npm install -g @membranehq/cli` or use `npx`. Installing a global npm CLI is a reasonable requirement for this integration, but it does involve fetching third-party code from the npm registry — verify the package and prefer `npx` or pinned versions if you want to avoid a global install.
Credentials
The skill declares no required environment variables or secrets. It explicitly advises against asking users for API keys and relies on Membrane to manage auth. The only external dependency is a Membrane account and network access, which are appropriate for this purpose.
Persistence & Privilege
No `always: true` or other elevated persistence is requested. The skill is user-invocable and does not instruct modifying other skills or system-wide configurations beyond installing a CLI the user chooses to install.
Assessment
This skill is coherent: it delegates auth and API requests to the Membrane CLI and does not ask for unrelated secrets. Before installing or running commands, verify you trust the Membrane project (review the @membranehq/cli package on npm and the linked GitHub repo), prefer using `npx` or a pinned CLI version to avoid installing global npm packages, and be aware that using Membrane means you rely on their service to proxy and store credentials for Simplecast. If you need a stricter security posture, audit the CLI code or perform actions through your own vetted tooling instead of installing the third-party CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk972qg49v8r62xh340ttqd3px58481sm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.