Venly
v1.0.2Venly integration. Manage data, records, and automate workflows. Use when the user wants to interact with Venly data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Venly integration) match the SKILL.md: all instructions show how to discover and run Venly actions via the Membrane CLI and how to proxy requests to Venly. The requirement of a Membrane account and network access is appropriate and expected; no unrelated credentials or tools are requested.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing login via browser (or headless flow), listing connections/actions, running actions, and proxying requests to Venly. The instructions do not tell the agent to read arbitrary files, access unrelated environment variables, or exfiltrate data to unexpected endpoints. Scope stays within 'use Membrane to talk to Venly.'
Install Mechanism
There is no automatic install spec; the SKILL.md instructs the user to run 'npm install -g @membranehq/cli' (or npx). This is a standard developer workflow, but installing a global npm package runs third-party code from the npm registry — the user should verify the package publisher and repository before installing.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask users for API keys, delegating auth to Membrane. This is proportional. Note: using Membrane means authentication and proxied requests flow through Membrane's service, so you must trust that service with request payloads and credential handling.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent system privileges or modify other skills' configs. Autonomous invocation is allowed (platform default) but not combined with other red flags here.
Assessment
This skill is coherent: it tells the agent to use the Membrane CLI to connect to Venly and requires a Membrane account. Before using/installing, confirm you trust the Membrane project and the npm package '@membranehq/cli' (check the npm publisher and GitHub repo). Be aware that Membrane will proxy requests and handle credentials server-side, so any Venly data and auth flows go through Membrane’s service. If you need stronger isolation, consider using a dedicated/separate Membrane account with least privileges and review Membrane’s privacy/security docs before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97bwe0xynt6s32n8fgtpz0cx184309g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.