Stackhawk
v1.0.2StackHawk integration. Manage data, records, and automate workflows. Use when the user wants to interact with StackHawk data.
⭐ 0· 123·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match the instructions: it uses Membrane as a proxy to interact with StackHawk. Asking the user to install the Membrane CLI and create a Membrane connection is appropriate for this integration.
Instruction Scope
SKILL.md only instructs use of the Membrane CLI (login, connect, list actions, run actions, proxy requests). It does not request unrelated files, environment variables, or data exfiltration. It explicitly advises not to ask the user for API keys.
Install Mechanism
There is no built-in install spec (instruction-only). The doc recommends installing @membranehq/cli globally via npm; this is a reasonable, common install path but is performed outside the skill and means the user must trust the npm package and grant it global rights.
Credentials
The skill declares no required env vars or credentials and relies on interactive Membrane login/connection. This is proportionate to the stated purpose. The user should note that authentication is handled server-side by Membrane, so trust in Membrane is required.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence. It is user-invocable and may be used autonomously by the agent per platform defaults.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to access StackHawk. Before installing/using it: (1) verify you trust Membrane (homepage/repo) because Membrane will hold or proxy your StackHawk auth; (2) note you must install @membranehq/cli (npm global install) yourself and grant that tool access to run commands; (3) do not supply StackHawk API keys directly to the skill — follow the connection/login flow; (4) if you allow an agent to run this skill autonomously, be aware it can invoke the Membrane CLI and make proxied API calls on your behalf, so restrict use to trusted agents/environments.Like a lobster shell, security has layers — review code before you run it.
latestvk971y01kgrc3e6pp9h8n56kkkh842a4q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.