White Swan
v1.0.0White Swan integration. Manage data, records, and automate workflows. Use when the user wants to interact with White Swan data.
⭐ 0· 55·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim integration with White Swan and the SKILL.md exclusively documents using the Membrane CLI/proxy to talk to White Swan. The CLI, network access, and a Membrane account are reasonable and proportionate requirements for that purpose.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying requests through Membrane. They do not instruct reading unrelated system files, collecting environment secrets, or transmitting data to unexpected endpoints.
Install Mechanism
The skill is instruction-only (no automatic install), but it suggests installing @membranehq/cli globally via npm. That is an expected way to get the CLI, but global npm installs run third-party code and may require elevated permissions — using npx (which the doc itself shows later) avoids a global install. Verify the package and publisher before running.
Credentials
No environment variables, credentials, or config paths are required by the skill. The SKILL.md explicitly advises letting Membrane manage credentials rather than asking users for API keys, which is consistent with the integration model.
Persistence & Privilege
The skill does not request always: true or other elevated persistent privileges. It's user-invocable and can be invoked autonomously per platform defaults; the skill itself does not modify other skills or system-wide config.
Assessment
This skill is instruction-only and tells the agent to use the Membrane CLI to operate on White Swan data. Before installing or running commands: (1) confirm you trust the @membranehq package and the Membrane/White Swan services (check package/publisher and official docs), (2) prefer running via npx to avoid a global npm install if you don't want system-wide changes, (3) be aware that requests and data will flow through Membrane's service (review their privacy/security docs), and (4) the CLI login opens a browser for authentication — do not share auth codes or tokens with untrusted parties. Overall the skill is coherent for its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk970px3dys84nayhswfr3e25hh84cvkm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
