Usersketch
v1.0.0UserSketch integration. Manage data, records, and automate workflows. Use when the user wants to interact with UserSketch data.
⭐ 0· 32·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (UserSketch integration) match the instructions: the SKILL.md describes using the Membrane CLI to connect to a UserSketch connector, run actions, and proxy API requests. Nothing in the file requests unrelated credentials, binaries, or system access.
Instruction Scope
Instructions stay within the expected scope (install CLI, login via browser, create connections, run actions, proxy requests). Minor inconsistency: the SKILL.md lists "Official docs: https://developers.sketch.com/" (Sketch developer docs) which appears unrelated to a "UserSketch" research platform — likely a documentation copy/paste error but worth verifying. The skill does not instruct reading arbitrary local files or environment variables.
Install Mechanism
There is no registry-level install spec (instruction-only), but the README recommends installing @membranehq/cli via npm -g. Installing a public npm CLI is reasonable for this use case, but global npm installs modify system state and should be done from trusted packages/sources. The recommendation to use npm is proportionate, not excessive.
Credentials
No environment variables or local credentials are requested by the skill. Authentication is delegated to Membrane (browser login and connector-based auth). This is proportionate to the stated purpose but means you must trust Membrane to hold and refresh credentials and to proxy requests correctly — verify Membrane's privacy/security practices before connecting sensitive accounts.
Persistence & Privilege
Skill is instruction-only, has no install-time agents or persistent components, and does not request 'always' inclusion. It relies on user-run CLI commands; it does not modify other skills or system settings beyond what a user does by running the Membrane CLI.
Assessment
This skill appears to do what it says: it instructs using the Membrane CLI to connect to UserSketch and run actions. Before installing or following the instructions: 1) Verify the @membranehq/cli package is the official one (check npm publisher and GitHub repo) rather than installing an unknown package globally. Consider using npx or a container if you prefer not to install globally. 2) Understand that Membrane will hold and proxy your UserSketch credentials — review their privacy/security documentation and ensure you trust them with the scope of access required. 3) Confirm the apparent documentation mismatch (the "developers.sketch.com" link) — ask the publisher or check the repository to ensure you're integrating with the intended API. 4) Avoid copy-pasting sensitive credentials into chat or the agent; follow the browser-based login flow described. If you need higher assurance, test the workflow in an isolated environment (container or VM) first.Like a lobster shell, security has layers — review code before you run it.
latestvk9752vfm9zb1je4vpfkf9fvk5h848agq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.