Usercom

This skill appears internally consistent, but consider these practical points before installing: - The SKILL.md depends on the third-party @membranehq/cli npm package (global install or npx). Installing global npm packages has ordinary supply-chain risk — prefer auditing the package or using npx to avoid a global install. - Verify the Membrane project and CLI repository (https://github.com/membranedev/application-skills and the @membranehq org) and confirm you trust the service at https://getmembrane.com before granting it access to your User.com account. - The login flow opens a browser and produces tokens; those tokens are managed by Membrane (server-side). Ensure you review the OAuth/permission scope presented during authentication so you know what access is being granted to Membrane. - The skill will run CLI commands that make network requests to Membrane and User.com. If you have strict network/data policies, confirm that sending data via Membrane's proxy is acceptable. - Because the skill is instruction-only, it will only perform actions when invoked (the platform allows autonomous invocation by default). If you prefer to avoid automated outbound calls, restrict autonomous skill use in your agent settings. If you trust Membrane and accept the npm install, this skill is coherent for integrating with User.com; otherwise, investigate the CLI source and authentication scopes before proceeding.