Sourceforge
v1.0.2Sourceforge integration. Manage Projects. Use when the user wants to interact with Sourceforge data.
⭐ 0· 120·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md directs the agent to use the Membrane CLI to interact with Sourceforge. There are no unrelated required env vars, binaries, or config paths.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests through Membrane. The instructions do not ask the agent to read local files, other credentials, or system state outside the Membrane workflow.
Install Mechanism
The skill is instruction-only (no automated install), but it tells users to run `npm install -g @membranehq/cli` or use `npx`. Installing a global npm package writes to disk and may require privileges — this is expected for a CLI integration but is a moderate-risk operation compared with no install.
Credentials
The skill declares no required environment variables or secrets. It relies on a Membrane account and browser-based login, which is proportionate to the stated purpose. The SKILL.md explicitly advises against asking users for API keys.
Persistence & Privilege
always is false and the skill is user-invocable. Autonomous invocation is allowed (platform default) but not combined with any broad credential requests or system modification, so no extra privilege concerns.
Assessment
This skill appears coherent: it uses the Membrane CLI to proxy Sourceforge calls and does not ask for unrelated credentials. Before installing: (1) confirm you trust the @membranehq/cli npm package and its publisher; (2) be aware `npm install -g` will install software system-wide and may require elevated privileges; (3) logging in via browser grants Membrane access to your connections — verify Membrane's privacy/security policy if you need to limit access; (4) if you need additional assurance, review the Membrane CLI package source (repository listed in SKILL.md) before use.Like a lobster shell, security has layers — review code before you run it.
latestvk979eg2fz8g42yvdtefamz83t9842kyy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.