Vision6
v1.0.2Vision6 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vision6 data.
⭐ 0· 83·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Vision6 integration) match the SKILL.md: it instructs the agent to install and use the Membrane CLI to connect to Vision6, discover actions, run actions, and proxy requests. Required binaries/env vars are none — consistent with an instruction-only CLI integration that relies on Membrane for auth.
Instruction Scope
Instructions are scoped to installing @membranehq/cli and using membrane commands (login, connect, action list/run, request). They do not ask the agent to read unrelated files or local secrets. Important caveat: the skill explicitly routes API calls through Membrane's proxy and relies on Membrane to manage credentials — so requests and credential-managed traffic will flow through a third-party service (Membrane).
Install Mechanism
No install spec in the registry; SKILL.md recommends npm install -g @membranehq/cli or using npx. Installing a public npm CLI is expected for this use case but has moderate risk (global npm install requires privileges and executes third-party code). No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill declares no required env vars or credentials. Instead it delegates auth to Membrane (the SKILL.md also warns not to ask users for API keys). This is proportionate, but delegates sensitive access to Membrane — which will hold and use Vision6 credentials on behalf of the user.
Persistence & Privilege
Skill is not always-enabled and uses normal autonomous invocation settings (disable-model-invocation:false). It does not request system-wide config changes or special persistent privileges in the provided instructions.
Assessment
This skill appears to do what it says: it instructs you to use the Membrane CLI to connect to Vision6 and run actions. Before installing or using it, consider: (1) Membrane will handle authentication and proxy API requests — any data you send (including contact data, PII, or campaign content) will flow through Membrane's services, so verify their privacy/security practices and whether that complies with your policies. (2) The instructions require installing a third-party npm CLI globally (npm install -g), which runs code on your machine and may need elevated privileges — prefer npx for one-off use or review the package on npm/GitHub first. (3) Confirm the @membranehq/cli package (and the referenced repository/homepage) are official and trustworthy. If you need to avoid a third-party proxy for compliance reasons, do not use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk978jt0j9txhr35kckb34ewc7n843m3c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.