ClawHub

Simplehash

v1.0.2

SimpleHash integration. Manage Deals, Persons, Organizations, Leads, Projects, Activities and more. Use when the user wants to interact with SimpleHash data.

⭐ 0· 89·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (SimpleHash integration) match the instructions (use the Membrane CLI to connect to SimpleHash). Required capabilities (network, Membrane account, CLI) are appropriate for this purpose.
✓
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to the SimpleHash API. It does not instruct reading unrelated files, harvesting environment variables, or sending data to unexpected endpoints.
ℹ
Install Mechanism
The install instruction is a global npm install of @membranehq/cli. That is a plausible and common install path for a CLI, but global npm installs write to disk and modify system state — users should verify the package origin and trustworthiness before installing globally.
✓
Credentials
The skill declares no required env vars or credentials and explicitly instructs to use Membrane's connection flow (browser-based login) rather than asking for API keys. That is proportionate to the described integration.
✓
Persistence & Privilege
The skill is instruction-only, has no install hooks, and is not marked always:true. It does not request persistent privileges or modifications to other skills or system-wide agent settings.
Assessment
This skill appears coherent and uses the Membrane CLI as intended. Before installing: (1) verify you trust the @membranehq/cli package and its source (check the npm page and the GitHub repo referenced in SKILL.md), (2) prefer installing in a controlled environment (avoid global installs if you prefer), (3) remember authentication opens a browser to authorize Membrane — your SimpleHash credentials and API calls will be proxied through Membrane servers, so review their privacy/security documentation, and (4) refuse to share API keys or secrets directly with the skill; follow the Membrane connection flow as documented.

Like a lobster shell, security has layers — review code before you run it.

latestvk970k188h26126mt7995qvs8v5843ftn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments