Siteleaf
v1.0.0Siteleaf integration. Manage Sites, Users. Use when the user wants to interact with Siteleaf data.
⭐ 0· 81·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is a Siteleaf integration and the SKILL.md explicitly uses the Membrane integration platform/CLI to interact with Siteleaf. Requiring the Membrane CLI and a Membrane account is coherent with the stated purpose. The short registry description does not mention Membrane, but the runtime instructions do, which explains the dependency.
Instruction Scope
All runtime steps are limited to installing and using the Membrane CLI, creating/looking up connections, running prebuilt actions, or proxying requests to Siteleaf via Membrane. This stays within the integration scope. Important: proxying sends requests (and any data you include) through Membrane’s servers, and authentication is handled by Membrane — so data and credentials are processed/stored off‑device by that third party.
Install Mechanism
There is no automatic install spec in the registry (the skill is instruction‑only). The SKILL.md recommends npm install -g @membranehq/cli, which is a normal approach but is a global npm install (moderate risk compared with instruction-only). The npm registry package should be vetted (publisher, version, checksums) before installing.
Credentials
The skill does not request local environment variables, config paths, or credentials. Instead it relies on Membrane to manage credentials server‑side, which is proportionate to the described design. Users should note that credentials live in Membrane’s system, not locally.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. Autonomous invocation is allowed (the default) but that is standard behavior and not in itself a red flag here.
Assessment
This skill is an instruction-only wrapper that asks you to install and use the @membranehq/cli to manage Siteleaf. Before installing or using it: (1) confirm you trust Membrane (getmembrane.com / @membranehq on npm) because requests and authentication are proxied through their service and may be stored/processed there; (2) vet the npm package (publisher, version, reviews, and repository) before running npm install -g; (3) avoid sending sensitive secrets or data unless you accept that they will transit and be handled by Membrane; and (4) if you need stricter data control, prefer direct Siteleaf API usage with credentials you manage locally rather than using a third‑party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk976rbq3c0qpzez2k5m5tr77yd83j8fk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.