Swell
v1.0.2Swell integration. Manage Organizations, Pipelines, Users, Filters. Use when the user wants to interact with Swell data.
⭐ 0· 85·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Swell integration) matches the instructions: all runtime steps call the Membrane CLI or Membrane proxy to manage Swell data. Minor mismatch: registry metadata declares no required binaries, but the SKILL.md explicitly requires installing the @membranehq/cli (npm). This is plausible but should have been reflected in metadata.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI, logging in via browser, creating connections, running actions, and proxying requests to the Swell API. The skill does not instruct reading unrelated local files or asking the user for API keys (it explicitly discourages that).
Install Mechanism
There is no formal install spec in the registry, yet the SKILL.md tells users to run `npm install -g @membranehq/cli` or use `npx`. Installing a global package from the public npm registry is a moderate-risk action; the skill should have declared this dependency and provenance. Recommend verifying the npm package and repository before installing and prefer `npx` or pinned versions if possible.
Credentials
The skill requests no environment variables or local credentials. Authentication is performed via Membrane's browser-based login and server-side credential handling, which is proportional to the task of accessing Swell on the user's behalf.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is instruction-only. It does require network access and user-driven browser auth for Membrane, which is expected for this integration.
Assessment
This skill delegates access to Swell through the Membrane CLI. Before installing or using it: (1) verify the @membranehq/cli npm package and the linked GitHub repository (https://github.com/membranedev/application-skills) to ensure they are official and maintained; prefer running actions via `npx` or a pinned version rather than a global `-g` install; (2) understand that browser login grants Membrane account access to your Swell data — review Membrane's privacy/permissions and the connector's scopes; (3) note the registry metadata omitted the CLI dependency — treat the SKILL.md as authoritative and be cautious installing external tooling; (4) if you have organizational security policies, get approval for installing third-party CLIs or giving a third party access to Swell data.Like a lobster shell, security has layers — review code before you run it.
latestvk977dtkjqg86pqkjprg2ar6ppd842dm7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.