ClawHub

Stack Ai

v1.0.0

Stack AI integration. Manage data, records, and automate workflows. Use when the user wants to interact with Stack AI data.

⭐ 0· 57·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Stack AI integration) matches the instructions: all actions are performed via the Membrane CLI and the skill requires a Membrane account and network access. Nothing in the SKILL.md asks for unrelated cloud credentials or access.
✓
Instruction Scope
Runtime instructions are limited to installing and invoking the Membrane CLI, logging in, creating/using a connector for Stack AI, listing and running actions, and issuing proxied HTTP requests through Membrane. The instructions do not ask the agent to read arbitrary local files, scan the system, or exfiltrate unrelated environment variables.
ℹ
Install Mechanism
The SKILL.md asks the user to install a global npm package (npm install -g @membranehq/cli). Installing global npm packages is a normal way to get a CLI but carries the usual supply-chain risks of any npm package; @membranehq appears to be the project org, which reduces but does not eliminate risk.
✓
Credentials
No environment variables, credentials, or config paths are declared or required by the skill. The instructions explicitly advise creating a Membrane connection rather than asking for API keys, which is proportionate for the described purpose.
✓
Persistence & Privilege
The skill is instruction-only, has no install spec, and does not request permanent/always-on inclusion. default autonomous invocation is allowed (platform default) and is not combined with any other concerning privileges.
Assessment
This skill is coherent: it simply documents how to use the Membrane CLI to work with a Stack AI connector. Before installing, verify the @membranehq npm package and its maintainer (avoid installing untrusted global packages), confirm the connector ID is the official Stack AI connector, and perform the Membrane login flow in a browser on a trusted machine (do not paste codes into untrusted terminals). If you manage sensitive data or run on shared CI agents, prefer installing CLIs in user-local locations rather than globally and review the Membrane project's npm package page and repository for recent activity and package integrity.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cppcbt8qact0e26r5jyzfeh844fem

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments