Weglot
v1.0.0Weglot integration. Manage data, records, and automate workflows. Use when the user wants to interact with Weglot data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with Weglot and all runtime instructions use Membrane (a known integration/proxy) to discover/connect/run Weglot actions — requiring a Membrane account is coherent with that purpose.
Instruction Scope
SKILL.md confines actions to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying API calls to Weglot. It does not instruct reading unrelated local files or broad data collection.
Install Mechanism
The instructions recommend installing @membranehq/cli via npm -g. This is a public npm package (moderate-risk install method); it is expected for this integration but you should verify the package identity and trustworthiness before running a global install.
Credentials
The skill declares no required env vars or config paths. It instead relies on Membrane for auth and a user login flow, which is proportionate to the described capability.
Persistence & Privilege
The skill is instruction-only, has no install spec, and is not always-enabled. It does not request elevated or persistent platform privileges in the metadata.
Assessment
This skill is an instruction-only integration that routes Weglot API access through the Membrane platform. Before installing or following its steps: 1) Verify you trust the Membrane project and the npm package @membranehq/cli (check publisher, package page, and repository) because a global npm install runs third-party code on your machine; 2) Understand that logging in will grant Membrane access to act on your Weglot account (the CLI stores/uses tokens locally and the Membrane service will proxy requests); 3) Avoid running the install/login in highly sensitive or production environments until you confirm the package and repository; 4) If you prefer not to use a third-party proxy, use Weglot’s official API directly and manage keys yourself. If you want a stronger assessment, provide the package registry link, the package's publisher identity, or the exact repository/commit that produced this SKILL.md.Like a lobster shell, security has layers — review code before you run it.
latestvk97ewz1nx0vm34ezjdpfe6wgps84ghpv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.