Stripo
v1.0.2Stripo integration. Manage Users, Workspaces. Use when the user wants to interact with Stripo data.
⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Stripo integration) aligns with the runtime instructions: all guidance is about using the Membrane CLI to connect to Stripo, run actions, and proxy API requests. No unrelated credentials, binaries, or configuration paths are requested.
Instruction Scope
The SKILL.md tells the agent/operator to install and use the Membrane CLI, perform login, create connections, list/run actions, and proxy arbitrary Stripo API requests via Membrane. This is expected for a connector skill, but the proxy capability means an authorized connection can be used to call any Stripo endpoint — verify user consent and which actions are run.
Install Mechanism
There is no platform install spec; the doc recommends npm install -g @membranehq/cli (or npx). Installing an external npm package is reasonable here but does introduce trust in the @membranehq/cli package — users should confirm the package source or prefer npx to avoid a global install.
Credentials
The skill declares no required env vars or credentials and instructs the user to use Membrane-managed connections (browser-based OAuth). Requesting a Membrane account and login is proportionate and expected; it does not ask for unrelated secrets.
Persistence & Privilege
No always:true or other elevated persistence requested. The skill is instruction-only and does not modify other skills or system-wide settings. Note: the default ability for the agent to invoke skills autonomously means it could run Membrane actions once a connection is authorized — this is normal but something to be aware of.
Assessment
This skill is coherent: it relies on the Membrane CLI to manage Stripo connections and run actions. Before installing/using: (1) confirm you trust the @membranehq/cli package (check its npm page/GitHub repo) or use npx to avoid a global install; (2) understand that when you create a connection you authorize Membrane to act on your Stripo account — review the consent screen and which actions you allow; (3) be cautious with 'membrane request' (it can proxy arbitrary Stripo API calls), and inspect any action IDs and input JSON the agent proposes to run; (4) if you want to limit risk, avoid granting the agent broad autonomous permissions and only run actions you explicitly approve.Like a lobster shell, security has layers — review code before you run it.
latestvk97fnv15546afq3pnnxe6gdr6d843t5v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.