Stepzen
v1.0.0StepZen integration. Manage data, records, and automate workflows. Use when the user wants to interact with StepZen data.
⭐ 0· 30·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (StepZen integration) match the instructions: all runtime steps show how to use the Membrane CLI to connect to StepZen, discover actions, and proxy requests. Requiring a Membrane account is coherent with using Membrane to access StepZen.
Instruction Scope
SKILL.md contains only CLI instructions (install Membrane CLI, login, connect, list/run actions, proxy requests). The instructions do not ask the agent to read unrelated files or environment variables. Important note: all API requests and auth are routed through Membrane, so Membrane will see request/response data and manage credentials — that is expected but a material privacy/trust consideration.
Install Mechanism
This is an instruction-only skill (no install spec). It asks the user to install the @membranehq/cli npm package globally (or use npx). That is a standard, traceable public npm package installation; because the skill doesn't perform installs itself, risk is proportional to the stated instructions. Users should still verify the CLI package and its source before installing.
Credentials
The skill requests no environment variables or local credentials. It explicitly recommends letting Membrane handle credentials rather than asking the user for API keys locally. This is proportionate to the described purpose, but it means you are delegating credential management to Membrane (trust/privacy tradeoff).
Persistence & Privilege
The skill does not request always:true or any elevated/persistent platform privileges. It is user-invocable and allows normal autonomous invocation; nothing in the manifest indicates it writes or modifies other skills or global agent settings.
Assessment
This skill appears to do what it claims: it instructs you to install and use the Membrane CLI to connect to StepZen and run actions or proxy requests. Before installing/using it: (1) remember that Membrane will act as an intermediary and will see proxied requests/responses and manage auth — review Membrane's privacy/security docs and trustworthiness; (2) verify the CLI package (@membranehq/cli) source and prefer running a pinned version via npx if you are cautious; (3) avoid running these commands in untrusted or shared environments if you are handling sensitive data; and (4) if you need to keep credentials solely within your control, do not create connections that hand secrets to an external service. If you want further assurance, provide the skill author/repository details and a link to Membrane's security/privacy documentation for review.Like a lobster shell, security has layers — review code before you run it.
latestvk97a1z70vy4asmxw7e1nqqfy6d847g2b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.