ClawHub

Vend

v1.0.0

Vend integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vend data.

⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill declares itself as a Vend integration and all instructions describe using the Membrane CLI to connect to Vend, list actions, run actions, or proxy requests — exactly what a Vend integration would need. There are no unrelated credentials, binaries, or paths requested.
✓
Instruction Scope
SKILL.md stays focused: install Membrane CLI, run membrane login/connect/action/request commands, and use Membrane's proxy. It does not instruct reading arbitrary local files or environment variables, nor sending data to endpoints other than Membrane/Vend. Headless login and browser flows are described clearly.
ℹ
Install Mechanism
The doc recommends installing @membranehq/cli via npm (global install). This is a public npm package and is proportionate to the stated purpose, but global npm installs require privilege and will place a binary on the system — users should verify the package identity on the npm registry and be comfortable installing third-party CLIs.
✓
Credentials
No environment variables or secret values are requested by the skill. Authentication is delegated to Membrane (browser-based OAuth/connector flows). The only required external account is a Membrane account, which is coherent with the instructions.
✓
Persistence & Privilege
The skill is not force-included (always: false) and uses the platform default of allowing autonomous invocation. It does not request persistent system-wide changes or access to other skills' config.
Assessment
This skill is an instruction-only adapter for Vend that relies on the Membrane CLI and your Membrane account. Before installing: (1) confirm you trust Membrane (review getmembrane.com and the @membranehq/cli npm package page); (2) be aware npm -g will install a system-wide binary (may require elevated privileges); (3) do not paste or share any secret tokens into chat — use the connector/browser auth flow described; (4) consider whether you want the agent to be able to call the skill autonomously (default behavior); and (5) if you need stricter control, create a limited Membrane account/role or review Membrane's access controls for the Vend connector.

Like a lobster shell, security has layers — review code before you run it.

latestvk97aj67h1p5h97ztb9x3q1za5s84c8vm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments