Upserve
v1.0.0Upserve integration. Manage data, records, and automate workflows. Use when the user wants to interact with Upserve data.
⭐ 0· 55·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Upserve and all runtime instructions center on using the Membrane CLI to discover connectors, create a connection, run actions, and proxy API requests. Requiring the Membrane CLI and a Membrane account is proportionate to the stated purpose.
Instruction Scope
SKILL.md confines runtime behavior to installing and using the Membrane CLI, performing login via browser, listing/connecting to Upserve connectors, running actions, and proxying Upserve API calls. It does not instruct the agent to read unrelated files, harvest environment variables, or send data to arbitrary endpoints beyond Membrane/Upserve.
Install Mechanism
The README-style instructions recommend installing @membranehq/cli via npm -g, which is a common delivery mechanism for CLIs but carries the usual npm risks (executing third-party code with global install privileges). No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill declares no required environment variables or local credentials and explicitly instructs not to ask users for Upserve API keys (use Membrane connections instead). This is proportionate; the only implicit trust is granting Membrane access to Upserve on the user's behalf.
Persistence & Privilege
The skill is instruction-only, has no always:true flag, does not request system-wide config access, and relies on Membrane's login flow to store tokens—behavior consistent with normal CLI-based integrations.
Scan Findings in Context
[no_regex_findings] expected: The static scanner had nothing to analyze because this is an instruction-only skill (only SKILL.md). This is expected for skills that only document CLI usage.
Assessment
This skill delegates auth and API access to the Membrane platform and asks you to install the @membranehq/cli via npm. Before installing, verify you trust the Membrane service and the npm package (review the package and its GitHub repo), and understand that you will grant Membrane access to your Upserve account when you create a connection. Installing an npm package globally runs third-party code with elevated filesystem scope—use a vetted environment. Finally, be cautious with any 'membrane request' commands you run: they proxy arbitrary API calls through Membrane, so avoid sending unrelated secrets or sensitive data to those commands unless you trust the service and its privacy/security policies.Like a lobster shell, security has layers — review code before you run it.
latestvk977mmedtz6a9p3gckwvn5f8y984care
License
MIT-0
Free to use, modify, and redistribute. No attribution required.