ClawHub

The Media Trust

v1.0.2

The Media Trust integration. Manage data, records, and automate workflows. Use when the user wants to interact with The Media Trust data.

⭐ 0· 59·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill's stated purpose (integrating with The Media Trust) is implemented via Membrane CLI commands, which is coherent: Membrane is a proxy/connector platform and expects to manage auth and API calls. Minor inconsistency: the SKILL.md's 'official docs' link points to digitalresolve.com while the skill name is The Media Trust and the skill metadata/homepage point to getmembrane.com — this is likely because Membrane proxies different services but is worth validating.
✓
Instruction Scope
All runtime instructions are limited to installing/running the Membrane CLI and using its commands (login, connect, action list/run, request). The skill does not instruct reading arbitrary host files or environment variables, nor does it instruct posting data to unexpected endpoints beyond the Membrane proxy.
ℹ
Install Mechanism
There is no formal install spec in the bundle (instruction-only), but the SKILL.md recommends installing @membranehq/cli from npm (npm install -g). This is a standard public package install; installing global npm packages runs package install scripts and writes to the system, so the user should verify the package identity/publisher or prefer npx to avoid a global install.
✓
Credentials
The skill declares no required env vars or secrets and explicitly says Membrane manages credentials server-side. That is proportionate to the described function. The user must have a Membrane account, which is reasonable given the workflow.
✓
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and allows autonomous invocation (the platform default). It does not request changes to other skills or system-wide settings.
Assessment
Before installing or using this skill: (1) Verify you trust Membrane (@membranehq/cli) — confirm the npm package name and publisher and consider using npx instead of npm -g to avoid a global install. (2) Understand that authentication is handled through Membrane and that API calls and data will flow through Membrane's servers—review their privacy/security policy. (3) Note the SKILL.md links (digitalresolve.com and getmembrane.com) — verify the intended target (The Media Trust) and that you are connecting to the correct service. (4) Be aware the CLI will open a browser for auth and may run install scripts during npm install; run these commands only on machines where you accept those changes. (5) If you do not want the agent to call this skill autonomously, adjust skill invocation settings on your agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk9757xx08sk6jr9eajc81842m1842dax

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments